cpigroupinc.com

Issued by R3

About this certificate

This digital certificate with serial number 04:17:1a:f0:29:f5:2d:96:72:3d:af:f5:36:ce:61:27:9c:41 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cpigroupinc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:17:1a:f0:29:f5:2d:96:72:3d:af:f5:36:ce:61:27:9c:41
Serial Number (int): 356311445096362829686995422634693800467521
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 43:27:aa:81:88:af:32:d6:bd:be:f2:68:26:09:46:25:c5:31:a5:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 45:f4:f8:4c:6e:86:ec:0d:cd:4f:93:2f:cb:1d:f0:ea:00:9a:e9:d7
Fingerprint (sha256): f4:b5:55:94:5d:92:4d:42:3b:b4:c9:9d:19:ff:c7:c8:fd:ec:c1:66:dc:a3:48:4c:8e:4d:45:42:79:8f:81:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cpigroupinc.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpigroupinc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

againstart.com.brandfixtures.com.coloradowomensmagazine.com
bhilai.biz
cpigroupinc.com
davidwhinray.com.992.eu
gamaliel.com
mycucina.net
nutrattivo.com
phoenix.bible.radiantheatflooring.com
term.retirementwealthplan.com
vfourauctions.com

Other certificates including the domain name cpigroupinc.com

(limited to 100 certificates)
westkelownavacationrentals.ca
odysee.studio8424.com
gauriganj.org
liquidate.accompli.sh
sunraj.in.canibuild.house
mjnazarene.org
working.dog
revivedpro.ca
aces.accompli.sh
books.europathelastbattle.org
veruela.com
cpigroupinc.com

Certificate

The complete raw certificate details for cpigroupinc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwbd114jHqg3qkPcH3Kx
k9gSCwJEc7wd9mZy6T8JUOEWB30Ar9G49OBdQbXhdV0e6m663FTBUU03JntQOXkY
Rvp3APEZWTNmtwDWcfkjhZBT7CKxbWirMn6Gs7C6aHdGiGATWU3E3ntmYoFRFzfE
5rHT/wjC7xJBVy2Y/jtoS8KmDd2yB19I5p7bskdWW2E2v1EKLZPN+v0BKPREzN5q
kx+km1wt4qGxbf+Yqwf5mI1NSKL0YgCpW1tkRF1yKPKXhgnrF3TTjc3RTbEqh5MJ
+HQ2gycgr6VHYSqgPyvsTTkqNYImV1Uz95VMCGOxp22w0B5Gdq0XcNxztwUNbdJT
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356311445096362829686995422634693800467521
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 14:48:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 14:48:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpigroupinc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24114902279150863246515288836494940991600489103944466062053264990435897066082263511794857611102776001159934283720552288062796216197776068742651097304789332341018922337938067481963765092706328847463643031450997479646276410955759007633197626350448151167829571571059415626162615594342906659819055484736051720819697092348184191782693892262919301280761439543202054373324978625441824952798161698591680043863424802766754192275069404352735039152335685523831613433486750894275734927920445241182859102101994533964443608748477307783413391720266632797398751558453860036041921538623322743469690091281691909385006832297087329260503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4327aa8188af32d6bdbef26826094625c531a53d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (251 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'againstart.com.brandfixtures.com.coloradowomensmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhilai.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpigroupinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidwhinray.com.992.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamaliel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycucina.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrattivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenix.bible.radiantheatflooring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'term.retirementwealthplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfourauctions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001899d2fa1dc0000040300483046022100f0ca09ed2456a5ca037b22f73672c859b77aa51df77c35c1a14d72bfed5ae4700221009dcd566d661b7f03053ab03b8d2a8d490379bb6c5d9a0696c2400204446f22fc007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001899d2fa29600000403004830460221008f983e964540db20d90bc2c58c8eeb0f2c69a293e0c8836d5b3cd16a11a1bbd2022100d7bab7720d101d294757c8f2ad1e59f969b9065d0ade0e0afe2c4ed571004ddc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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