cpcontacts.ciic.ventures
Issued by R3
About this certificate
This digital certificate with serial number 03:36:21:5a:73:85:de:4c:0b:d2:56:d9:e2:a9:96:da:2a:0b was issued on by Let's Encrypt.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cpcontacts.ciic.ventures
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:36:21:5a:73:85:de:4c:0b:d2:56:d9:e2:a9:96:da:2a:0bSerial Number (int): 279756439782672834965894311506942092782091
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 05:31:11:b8:a7:47:9c:6f:c5:9c:25:cf:1a:98:d5:08:c6:cf:82:aa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 88:1c:33:24:07:1c:dd:c3:3f:b7:09:80:ae:17:86:d5:e2:12:97:e9
Fingerprint (sha256): e8:51:a6:5d:fa:58:5b:e0:74:3e:53:01:dc:8f:50:d2:ff:e0:a4:67:21:fe:71:b9:65:f6:2d:32:be:a1:01:0a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate cpcontacts.ciic.ventures
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cpcontacts.ciic.ventures
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.ciic.ventures
ciic.ventures
cpanel.ciic.ventures
cpcalendars.ciic.ventures
cpcontacts.ciic.ventures
mail.ciic.ventures
webdisk.ciic.ventures
webmail.ciic.ventures
www.ciic.ventures
ciic.ventures
cpanel.ciic.ventures
cpcalendars.ciic.ventures
cpcontacts.ciic.ventures
mail.ciic.ventures
webdisk.ciic.ventures
webmail.ciic.ventures
www.ciic.ventures
Other certificates including the domain name ciic.ventures
(limited to 100 certificates)
Certificate
The complete raw certificate details for cpcontacts.ciic.ventures in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAzYhWnOF3kwL0lbZ4qmW2ioLMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMjAwMjU3MjZaFw0yNDAxMTgwMjU3MjVaMCMxITAfBgNVBAMT GGNwY29udGFjdHMuY2lpYy52ZW50dXJlczCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK5tJuf/c1cRe4ZU1bJJo6/18DdoDMGJNX0dHEGu/O4MW2FC6yrS hU61lrpOpVBQIHRnpavD3pUrYLVcb37bJexZbWgdt/pO5Xt7151/lXE0vubxk41e T6PcSpb877dzTpP2yDVPnM46sLMRoJNRq0aKMczhUwNUCo+eE6ag3wP+0QPQRbTu YtUWgsZUE+Z9ux+HP3i3MxAn6jQPi1PDJxmNhB/xz7kqetdRNln5wsC/HODbj0bX QfeFFmWHcegz1BK+/tuHonbgUURRpKF07TGUFv/zLgakLzdqu6B6rEXwBGTUYFD8 z39PmCtuGoKEaqocvvwHHDx9ftiNsugrVeMCAwEAAaOCAs0wggLJMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQUBTERuKdHnG/FnCXPGpjVCMbPgqowHwYDVR0jBBgwFoAU FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p LmxlbmNyLm9yZy8wgdYGA1UdEQSBzjCBy4IaYXV0b2Rpc2NvdmVyLmNpaWMudmVu dHVyZXOCDWNpaWMudmVudHVyZXOCFGNwYW5lbC5jaWljLnZlbnR1cmVzghljcGNh bGVuZGFycy5jaWljLnZlbnR1cmVzghhjcGNvbnRhY3RzLmNpaWMudmVudHVyZXOC Em1haWwuY2lpYy52ZW50dXJlc4IVd2ViZGlzay5jaWljLnZlbnR1cmVzghV3ZWJt YWlsLmNpaWMudmVudHVyZXOCEXd3dy5jaWljLnZlbnR1cmVzMBMGA1UdIAQMMAow CAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA2ra/az+1tiKfm8K7 XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLSzsaEwAABAMARjBEAiAoE+QHJU8UH/qv sFfX6Q6/ysuz+sQYyc9v8VcYdZ1nfwIgXSZhAL18CFZUsoZEJr1eg2VrsGyQU7wK hX6ec59/04wAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYtL OxpwAAAEAwBHMEUCIFGS9p/ceaLas4MMyWMcwbSKYym1c0AzwBpCqasUx4ZIAiEA /mxMmoo2kj84HzWF3aJgQavJW7vMOvJLB5SjFxeDtEQwDQYJKoZIhvcNAQELBQAD ggEBAFw/M+TYBpWka/GcfDj1DsvF4o+CDIsRWJ/QNbMau6TMHDUQTeQVIt7uYVz+ lD/doNYCLBagd7BypJXHzPZuyJTt1ameekXenEyD5fJYAFJbE3hC5rawvKPX95YN hwDnzSQfpW1svuQpdzaCFYaODyJajWCWD4TSMR3Hml07Zsl03Hth8fiyuJaBpzYM wLaQVWqlzcjKrUph61zfczBwZM8rXnm9DqXPqVfTZN8HWOWYczb9C+CnRUDQW4SY BfNa+GO8j1t00Wbw3dJwbtgD7gVJlKhz4RGB6r0Vlz60vBuNB7Ntr4mgZe5LveLQ RE8AYwyfQ701VcpoEvZUE1mrF9o= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm0m5/9zVxF7hlTVskmj r/XwN2gMwYk1fR0cQa787gxbYULrKtKFTrWWuk6lUFAgdGelq8PelStgtVxvftsl 7FltaB23+k7le3vXnX+VcTS+5vGTjV5Po9xKlvzvt3NOk/bINU+czjqwsxGgk1Gr RooxzOFTA1QKj54TpqDfA/7RA9BFtO5i1RaCxlQT5n27H4c/eLczECfqNA+LU8Mn GY2EH/HPuSp611E2WfnCwL8c4NuPRtdB94UWZYdx6DPUEr7+24eiduBRRFGkoXTt MZQW//MuBqQvN2q7oHqsRfAEZNRgUPzPf0+YK24agoRqqhy+/AccPH1+2I2y6CtV 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279756439782672834965894311506942092782091 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 02:57:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 02:57:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpcontacts.ciic.ventures' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22019289910282052840366190879659365730865245468433236172624672653638573579523598320559413343259795667239812647209377419401217780936683049818864155559374046937089444114289702436636555148088588396382098268319995927302190656547441954525386925604777915000025076906603696599213371114827845665246823849203883626719175870519226436444863387870920198692776525030322310569874526105615512135680550091041782676928642404057036971999833387203969502028663247158045681168763505055644791200280035074316658286353343031658700674300203947253791589986961062425451274714884078616489037088973110689972448104008858827663729438489072580122083 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 053111b8a7479c6fc59c25cf1a98d508c6cf82aa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ciic.ventures' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciic.ventures' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ciic.ventures' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.ciic.ventures' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.ciic.ventures' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ciic.ventures' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ciic.ventures' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ciic.ventures' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciic.ventures' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b4b3b1a13000004030046304402202813e407254f141ffaafb057d7e90ebfcacbb3fac418c9cf6ff15718759d677f02205d266100bd7c085654b2864426bd5e83656bb06c9053bc0a857e9e739f7fd38c00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b4b3b1a70000004030047304502205192f69fdc79a2dab3830cc9631cc1b48a6329b5734033c01a42a9ab14c78648022100fe6c4c9a8a36923f381f3585dda26041abc95bbbcc3af24b0794a3171783b444 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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