www.bigblack.org

Issued by R3

About this certificate

This digital certificate with serial number 03:44:2a:ff:ae:f8:47:86:6d:4c:54:ce:cc:d3:81:e1:c6:88 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.bigblack.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:44:2a:ff:ae:f8:47:86:6d:4c:54:ce:cc:d3:81:e1:c6:88
Serial Number (int): 284533213906236439589919770565609875687048
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:9a:da:c0:19:96:39:c4:e1:66:4f:5f:85:15:28:10:19:e3:b2:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9d:c1:93:4a:77:39:2e:bf:ef:5a:5c:25:76:f1:ee:57:fd:0e:ae:df
Fingerprint (sha256): fa:b4:da:ab:25:1b:ea:a3:25:5d:d0:75:ff:9f:f7:d8:0b:8b:95:df:b7:2e:9a:51:dd:34:2c:6d:a8:d3:15:fd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.bigblack.org

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bigblack.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.bigblack.org
bigblack-org.leftfield-entertainment.com
bigblack.org
cpanel.bigblack.org
cpcalendars.bigblack.org
cpcontacts.bigblack.org
mail.bigblack.org
webdisk.bigblack.org
webmail.bigblack.org
www.bigblack-org.leftfield-entertainment.com
www.bigblack.org

Other certificates including the domain name bigblack.org

(limited to 100 certificates)
mail.bigblack.org
webdisk.bigblack.org
www.bigblack.org

Certificate

The complete raw certificate details for www.bigblack.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgISA0Qq/674R4ZtTFTOzNOB4caIMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MjAxMjA2NDNaFw0yNDA4MTgxMjA2NDJaMBsxGTAXBgNVBAMT
EHd3dy5iaWdibGFjay5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0HJZJOO27xAG0UFLacmQvL9HKHpsZR6UGlrD16xzFGWXqfoETgEIk3sIDcfrD
BDsMeEgPABGhLyAFh1/YU4IuA1g4NeZ3sBI8wTBJOwRNlrwJm98lxROSRnpReyri
eFFpvtXF94g7fF51IQVEeChgs8b9K7ZtT1E0b+Kx4IkCGXtYdLgxq6UCyLuhBK7l
vi9oBAzC984yyJUGYgDKQA672YO3k+wzNvLn0zqUZuxCs/3N1jcqzPfuH0hSY/fw
F5iqLa6KK0Se6gb8VaXkb9KZIk6LMHUSzY4+vuhaVzIiX2l1j6r8oZaJEcjAvWiU
0QnRAUQgjlNy9YHelkvUqONtAgMBAAGjggMhMIIDHTAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFLKa2sAZljnE4WZPX4UVKBAZ47LVMB8GA1UdIwQYMBaAFBQusxe3WFbL
rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov
L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v
cmcvMIIBJwYDVR0RBIIBHjCCARqCGWF1dG9kaXNjb3Zlci5iaWdibGFjay5vcmeC
KGJpZ2JsYWNrLW9yZy5sZWZ0ZmllbGQtZW50ZXJ0YWlubWVudC5jb22CDGJpZ2Js
YWNrLm9yZ4ITY3BhbmVsLmJpZ2JsYWNrLm9yZ4IYY3BjYWxlbmRhcnMuYmlnYmxh
Y2sub3JnghdjcGNvbnRhY3RzLmJpZ2JsYWNrLm9yZ4IRbWFpbC5iaWdibGFjay5v
cmeCFHdlYmRpc2suYmlnYmxhY2sub3JnghR3ZWJtYWlsLmJpZ2JsYWNrLm9yZ4Is
d3d3LmJpZ2JsYWNrLW9yZy5sZWZ0ZmllbGQtZW50ZXJ0YWlubWVudC5jb22CEHd3
dy5iaWdibGFjay5vcmcwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5
AgQCBIH2BIHzAPEAdgAZmBBxCfDWUi4wgNKeP2S7g24ozPkPUo7u385KPxa0ygAA
AY+WHIt+AAAEAwBHMEUCIQClM1/Ch8KdaCBrfi/4Hn0vBe147tDiv6ZB1PrACDvf
2QIgZ+Ed/ULbmeDHcJ40siX4eZs4jK/CeII2BMCdfYhTVIgAdwB2/4g/Crb7lVHC
Ycz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY+WHJNfAAAEAwBIMEYCIQCSUSXJwnU/
wQnVwILpZtI+MaR+pxQplCPagzNFoDmQGQIhAIP87DFIBXnM+oYaSAL7u71F5NKC
t8ROU/whJSTBEu/vMA0GCSqGSIb3DQEBCwUAA4IBAQCOm+ioIbwgQAqNcOC36wtG
iFyoU6dwwJ7iwLP/kmT/qigArNc2eCybOdTy06wtivG39yxBA5a823ue63uhOWts
cYxZrKouVfmVv2HNIzv/StQ6S8L+kTGSDcZu+wXxmAVli5v8iKj/VSe4bKtnxURF
Talteo3Qr7TE7Y75C1e0PGGNC9hDOpr2+Kb5bXIIrVsHCoodTybM5vgF3gOEJrIc
xEpQV+vmdhW1WvPefYNznPvGO+Q1bNF8xaaKi6xsJhdKPUlbVTtmpyvDkg+3kTOi
YllXUA4iWT4QtkXD2zl9uBf292IRDhhhpgvIQTnC8XqwS0mvD4vHkTKVL9I0ax2Q
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtByWSTjtu8QBtFBS2nJk
Ly/Ryh6bGUelBpaw9escxRll6n6BE4BCJN7CA3H6wwQ7DHhIDwARoS8gBYdf2FOC
LgNYODXmd7ASPMEwSTsETZa8CZvfJcUTkkZ6UXsq4nhRab7VxfeIO3xedSEFRHgo
YLPG/Su2bU9RNG/iseCJAhl7WHS4MaulAsi7oQSu5b4vaAQMwvfOMsiVBmIAykAO
u9mDt5PsMzby59M6lGbsQrP9zdY3Ksz37h9IUmP38BeYqi2uiitEnuoG/FWl5G/S
mSJOizB1Es2OPr7oWlcyIl9pdY+q/KGWiRHIwL1olNEJ0QFEII5TcvWB3pZL1Kjj
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284533213906236439589919770565609875687048
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 12:06:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-18 12:06:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bigblack.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22736991695999953130407775446352006481710461014235748131950815637135315968570772815772002330911061787203595347484789297500624002861402835520190739199079562716123731534028577333578231712389974125396998629979030253796343676012629223198518679513271658439673087866750386236241776797827083998742901415934419450792411697315491928656363923860946034429806997718202958393116647006883117708659751108705170887876202127729629182649513333590074112569791211895826836907663971493941087259182237645659974627055686283401395257748309097088493571848558074511586309501596420865952955428021523553434861252388778061169842983244173905814381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b29adac0199639c4e1664f5f8515281019e3b2d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (286 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bigblack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigblack-org.leftfield-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigblack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.bigblack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.bigblack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.bigblack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bigblack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.bigblack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bigblack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigblack-org.leftfield-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigblack.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f961c8b7e0000040300473045022100a5335fc287c29d68206b7e2ff81e7d2f05ed78eed0e2bfa641d4fac0083bdfd9022067e11dfd42db99e0c7709e34b225f8799b388cafc278823604c09d7d8853548800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f961c935f0000040300483046022100925125c9c2753fc109d5c082e966d23e31a47ea714299423da833345a039901902210083fcec31480579ccfa861a4802fbbbbd45e4d282b7c44e53fc212524c112efef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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