*.dpfpower.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:1c:53:58:38:29:8e:ef:6b:90:d5:8b:89:11:f4:16:2e:fc was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.dpfpower.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:1c:53:58:38:29:8e:ef:6b:90:d5:8b:89:11:f4:16:2e:fc
Serial Number (int): 270975548053948244779337347020809041227516
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a1:85:0c:02:00:35:61:62:53:86:92:f3:a6:25:d1:c3:19:14:ad:e9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 89:d5:ba:d8:24:7f:d9:5a:78:4f:be:94:b6:9f:73:91:89:2a:67:10
Fingerprint (sha256): 16:f8:e2:5e:2b:66:f9:85:cd:aa:18:80:8d:e3:99:bc:b6:dc:29:7b:ed:49:a5:ee:3a:59:75:83:ff:6b:7d:79

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.dpfpower.co.uk

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dpfpower.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dpfpower.co.uk
*.rejuvenatesussex.co.uk
*.speedwellcateringhire.co.uk
*.sussex-designs.co.uk
*.theworks-services.co.uk
cpanel.gunnebutchers.co.uk
cpcalendars.gunnebutchers.co.uk
cpcontacts.gunnebutchers.co.uk
dpfpower.co.uk
gunnebutchers.co.uk
mail.gunnebutchers.co.uk
rejuvenatesussex.co.uk
speedwellcateringhire.co.uk
theworks-services.co.uk
webdisk.gunnebutchers.co.uk
webmail.gunnebutchers.co.uk
www.bestbeech.sussex-designs.co.uk
www.dpf.sussex-designs.co.uk
www.gunnebutchers.co.uk
www.gunnebutchers.sussex-designs.co.uk
www.rejuvenate.sussex-designs.co.uk
www.speedwell.sussex-designs.co.uk
www.works.sussex-designs.co.uk

Other certificates including the domain name dpfpower.co.uk

(limited to 100 certificates)
www.colourthirst.sussex-designs.co.uk
*.dpfpower.co.uk
dpfpower.co.uk
*.megamixdisco.co.uk
rejuvenatesussex.co.uk
*.sussex-designs.co.uk
www.sechimney.sussex-designs.co.uk
rejuvenatesussex.co.uk
cpcontacts.gunnebutchers.co.uk
dpfpower.co.uk
dpfpower.co.uk

Certificate

The complete raw certificate details for *.dpfpower.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9ejEhjulbYH7CHG8x91
eMiaWA0Omu9vjpppNJ7M8PzRR0SO+7rEdOebstKOHxKsfHm8CTLFcuOH61OWuZIV
v0mbH57bTe12o3yk703GGBo0RxsiklLbs1N6GWGnLi2VK23WdZQuXtA7oDDa30gC
YuP8s2N8zjqyI330c+U89KgVcbxkP3S5aMu4JTnYY8daLvt7fpI5eHJoWqjefHX7
sO/zooPhIl74u1lja6CUjILoNuFwS0gCSWeIzoxbLKurWmHlgGEXj9tpwVQQl4Rz
nLUk3qw5jbgZd6IvyzZptpBDtY2twR+2PzCVY2q0jj8qRivBtn5OWHlUL6HRpk5S
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270975548053948244779337347020809041227516
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-05 07:28:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-03 07:28:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dpfpower.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19168318615200737049347601191352266901431275011392755080465262798100845820203560087054428487487626211374069829204309593169956238137845646719023644116635959482379797860383577124923364665993079365154295816109974851981133246831858725056546004686699871359605594584775302610158630793185653300417314903381546431986350658053429118345351210205970056309570279685920484282949727123148027679026548220170424567770799233169799826082886244900060193729988774613205675211964262658294849187738781286335035188896326138248095077858368538299163234593064652848930949545144959179812669456866755126417946642944746429089952860831558767891127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1850c0200356162538692f3a625d1c31914ade9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (658 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dpfpower.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rejuvenatesussex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speedwellcateringhire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theworks-services.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.gunnebutchers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.gunnebutchers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.gunnebutchers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpfpower.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunnebutchers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gunnebutchers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rejuvenatesussex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedwellcateringhire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theworks-services.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.gunnebutchers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.gunnebutchers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestbeech.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dpf.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gunnebutchers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gunnebutchers.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rejuvenate.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speedwell.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.works.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f47de29000000040300483046022100a594cf71ebf31c9eb610d1179cd23d71d9c56d8860d2797f90bf72600ddcc788022100ae0b2c60d4a983fc0c93dbc8bd5213917ed13944804e835e4ec90342ef1d21ee0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f47de29070000040300473045022100e246dc0f2993635c2f889fa98007907668dae317fa82544f91e0703fa77fd934022004a2072c085bff229ad7245cdfa092b2c9503141c7eaae4347d6e663c5d9bf27
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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