yushikai.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:50:b3:ac:90:64:02:30:71:e2:29:c6:b1:e9:a6:d1:bf:95 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=yushikai.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:50:b3:ac:90:64:02:30:71:e2:29:c6:b1:e9:a6:d1:bf:95
Serial Number (int): 288798274963851461662068901825340962357141
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:5f:16:19:af:8e:e0:ca:bc:59:71:c8:a8:de:48:a4:e4:33:54:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): da:d3:4d:92:89:4d:c5:ad:85:bb:e3:b8:07:be:88:3c:d5:e8:22:a7
Fingerprint (sha256): 11:b5:00:7f:58:d1:1e:e3:9e:f2:d0:b7:91:e2:60:97:98:7d:fd:d2:45:cf:19:b4:84:bf:ec:22:72:e6:16:83

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate yushikai.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yushikai.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.yushikai.co.uk
yushikai.co.uk

Other certificates including the domain name yushikai.co.uk

(limited to 100 certificates)
www.yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
www.yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.marketmuscles.com
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
www.yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
*.yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
*.yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
*.yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
www.yushikai.co.uk
yushikai.co.uk
actionfitnessmartialartsfl.com
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk

Certificate

The complete raw certificate details for yushikai.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288798274963851461662068901825340962357141
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-07 02:36:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 02:36:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yushikai.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 860447572065747986232702349365000205115406835905726600568628864799934551811983430157217205154903177838121090873835023351743399551635926983216253799288569253216424861913880684240421967223368431990498590895845229000938165148360225166308274483541761003148784180639274011046921862607673794012936404078024590940329445938424635295150562660461968600975125679084582612452279487138968530149367325706872564649789101872299749027059351187061226715785304773836257073663492817424596868712778610252900538089213966361246806038102678427486023559761700112732996944522983770109243743965469226964811993858782644424138171888897495306652722281830364278048375108030077582255328187844795887654100042537973272364930094575563454757794116054551249776936529218102390331906992789531288394016218360034781178751252852720767621969650221240678806888760855378282747314535953326570130074738170148928181616457016536135382306232177855038810741353111151502664567107595100000403648271483767239701812557143469538554027918174582729064262143589873182069655057877162908869724883391334934351115994502315396215279956694055104881831351229802901962765797153051736590791714192157068863637318129699386949178545252923838747381148271622549789314392207370326453484817671885853949184941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf5f1619af8ee0cabc5971c8a8de48a4e433541e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yushikai.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yushikai.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001695639988300000403004730450221009765009ab57c5737f2ed0d23ef42ea50d8a2b2d599ab8df1e8c0ccea4b2007cb022068022b9e2d4d12c941078be0dcacd0f142e6db7fb8c1f57cd1338b18a85f33b600750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016956399acb000004030046304402203aa5f674ef11e7c42c446cd63be3f6c2d669591d420b0933f4e2444ec5d34af0022008b3bab5b87a08c24b9951d4f7aa88e8fbdc84f2f5899c3fbcaa2c480a390456
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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