craftcotton.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:9a:37:83:cc:d6:25:c7:af:f1:96:05:1d:a2:7f:56:c9:1b was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=craftcotton.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:37:83:cc:d6:25:c7:af:f1:96:05:1d:a2:7f:56:c9:1b
Serial Number (int): 313814134186339980024125872647447334275355
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 18:c9:20:e0:f2:3d:e5:f8:f6:3f:08:fa:24:e6:5e:3f:89:2f:34:bf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 41:02:3e:a1:9c:0e:bd:9f:20:c2:11:ba:f2:1c:56:65:16:c4:f4:d4
Fingerprint (sha256): 0e:09:3a:fd:5c:a0:4e:63:74:86:a6:6a:ec:91:56:e9:64:df:48:00:bd:a4:31:4e:fc:ff:7f:d3:db:51:5c:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate craftcotton.co.uk

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for craftcotton.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4a8e0049ab28d80275f8f31bf-11410.sites.k-hosting.co.uk
4a8e0049ab28d80275f8f31bf-11410.sites.k-hosting.co.uk
craftcotton.co.uk
craftcotton.com
visagetextiles.co.uk
visagetextiles.com
webmail.visagetextiles.com
www.craftcotton.4a8e0049ab28d80275f8f31bf-11410.sites.k-hosting.co.uk
www.craftcotton.co.uk
www.craftcotton.com
www.visagetextiles.4a8e0049ab28d80275f8f31bf-11410.sites.k-hosting.co.uk
www.visagetextiles.com

Other certificates including the domain name craftcotton.co.uk

(limited to 100 certificates)
webmail.visagetextiles.com
webmail.visagetextiles.com
craftcotton.co.uk
4a8e0049ab28d80275f8f31bf-11410.sites.k-hosting.co.uk
4a8e0049ab28d80275f8f31bf-11410.sites.k-hosting.co.uk
www.craftcotton.co.uk
4a8e0049ab28d80275f8f31bf-11410.sites.k-hosting.co.uk
4a8e0049ab28d80275f8f31bf-11410.sites.k-hosting.co.uk
4a8e0049ab28d80275f8f31bf-11410.sites.k-hosting.co.uk
4a8e0049ab28d80275f8f31bf-11410.sites.k-hosting.co.uk
4a8e0049ab28d80275f8f31bf-11410.sites.k-hosting.co.uk

Certificate

The complete raw certificate details for craftcotton.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jPawLD0e3KYyhRng8nJ
60QT/ZHYRSVspMq88CsX9LiOuQDDBYKV6zGm46urKxk1Jn+yqsiZWx8iGn4SVYzT
lNxCTccYoOSv345nNVbPBcSkNtxO7Roh9xcPemLRPDo5J4xuXeEdAeZkKNbb+yqw
78hfxGEhC0m81qWhej5E7ldkXp9zd3Z/sl9WdgAtS3WZY7MfywW3xjDYmf0qchMY
NYvkcYiQ5kNGXJzhF81Hhh5aaP6IKHJHrRNltfmVO+bAwBFm3Ch2HXn3viPP+gdj
ghlPB+hqmN9MH6SUxDXZEtWD8zTEC9mm7Tm4uEhuXj1YtvReZkPWTK8oHJ6P8PWK
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313814134186339980024125872647447334275355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 01:26:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 01:26:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'craftcotton.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26535614451193029845819438068689823568252638750234908104263805016834905365557231876869769881409925923161579576601242090191932571645965132439378819579253387667623901010162914644890953250616229749465962637158611210822856504557173757770624934762929163567568703331487744108712377840142412607435804231740584788690286261621374363868000519307872904871138662676966777059995004258345748707840327362609008954710040553420768280869311242853903952002760659846022613397958416467407150604150353011109492209071526028908943452380935027812258444175388870350090772812292000687646260567323625395506851339877027131678188738611935272340151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18c920e0f23de5f8f63f08fa24e65e3f892f34bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (435 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4a8e0049ab28d80275f8f31bf-11410.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4a8e0049ab28d80275f8f31bf-11410.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftcotton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftcotton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visagetextiles.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visagetextiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.visagetextiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.craftcotton.4a8e0049ab28d80275f8f31bf-11410.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.craftcotton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.craftcotton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visagetextiles.4a8e0049ab28d80275f8f31bf-11410.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visagetextiles.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d1f8ac5230000040300463044022023d8b0e3353fd24895b618295fda5e72b457b83f44b1e3b35d2ee34bab8d749b022066b8b948ab7bad1b2c1f46fce4a3cd3fbc715e36e2d5afd574ce6a6f44962614007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d1f8ac60d0000040300473045022024041a6adbbc18d8da302697ed5b0de99ad04a927ffbbc79ff475cd106cc3140022100f4eee640c618dd3d6a84d972769b95c2740cc051745d35f6a59a6f5103bdafa5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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