www.kdservices.co.in
Issued by R3
About this certificate
This digital certificate with serial number 04:3b:cd:22:97:54:75:83:5f:b3:27:1c:f7:95:93:0e:d4:3a was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.kdservices.co.in
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:3b:cd:22:97:54:75:83:5f:b3:27:1c:f7:95:93:0e:d4:3aSerial Number (int): 368798474721940838238880857057691880576058
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 83:ea:15:1a:3a:93:ea:a7:df:86:3d:ee:4f:70:f4:88:2e:91:97:42
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b1:a7:a3:d6:dd:70:20:2a:ec:4d:c8:19:e9:1b:6d:5b:6e:62:59:4c
Fingerprint (sha256): 29:3c:05:c4:fe:c2:2b:d4:9a:d2:41:01:38:4c:e9:6a:95:ff:39:b3:a3:00:e2:b9:1c:75:c3:0c:87:3a:21:f2
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.kdservices.co.in
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.kdservices.co.in
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cpanel.kdservices.co.in
kdservices.co.in
mail.kdservices.co.in
webdisk.kdservices.co.in
www.kdservices.co.in
kdservices.co.in
mail.kdservices.co.in
webdisk.kdservices.co.in
www.kdservices.co.in
Other certificates including the domain name kdservices.co.in
(limited to 100 certificates)
account.kdservices.co.in
account.flyachtcharters.com
mycpd.cpdiamonds.com
books.q-home.be
account.kdservices.co.in
books.q-home.be
books.fastguardservice.com
books.q-home.be
kdservices.co.in
www.kdservices.co.in
books.q-home.be
books.q-home.be
www.kdservices.co.in
account.flyachtcharters.com
account.flyachtcharters.com
account.kdservices.co.in
account.kdservices.co.in
account.kdservices.co.in
www.kdservices.co.in
account.flyachtcharters.com
www.kdservices.co.in
account.kdservices.co.in
account.flyachtcharters.com
books.q-home.be
accountsae.verify360.com
account.kdservices.co.in
books.kreaturesmarketing.com
invoices.stevenwallacemedia.com
billing.thriveagency.com
books.q-home.be
books.q-home.be
books.q-home.be
account.kdservices.co.in
online.renovasolutions.net
books.q-home.be
www.kdservices.co.in
client.simplestit.com
account.kdservices.co.in
account.flyachtcharters.com
account.flyachtcharters.com
books.mindset.sk
books.q-home.be
account.kdservices.co.in
account.kdservices.co.in
account.kdservices.co.in
books.q-home.be
account.flyachtcharters.com
accounts.owatters.com
account.flyachtcharters.com
account.flyachtcharters.com
account.kdservices.co.in
kdservices.co.in
kdservices.co.in
books.q-home.be
books.q-home.be
account.kdservices.co.in
account.flyachtcharters.com
mycpd.cpdiamonds.com
books.q-home.be
account.kdservices.co.in
books.q-home.be
books.fastguardservice.com
books.q-home.be
kdservices.co.in
www.kdservices.co.in
books.q-home.be
books.q-home.be
www.kdservices.co.in
account.flyachtcharters.com
account.flyachtcharters.com
account.kdservices.co.in
account.kdservices.co.in
account.kdservices.co.in
www.kdservices.co.in
account.flyachtcharters.com
www.kdservices.co.in
account.kdservices.co.in
account.flyachtcharters.com
books.q-home.be
accountsae.verify360.com
account.kdservices.co.in
books.kreaturesmarketing.com
invoices.stevenwallacemedia.com
billing.thriveagency.com
books.q-home.be
books.q-home.be
books.q-home.be
account.kdservices.co.in
online.renovasolutions.net
books.q-home.be
www.kdservices.co.in
client.simplestit.com
account.kdservices.co.in
account.flyachtcharters.com
account.flyachtcharters.com
books.mindset.sk
books.q-home.be
account.kdservices.co.in
account.kdservices.co.in
account.kdservices.co.in
books.q-home.be
account.flyachtcharters.com
accounts.owatters.com
account.flyachtcharters.com
account.flyachtcharters.com
account.kdservices.co.in
kdservices.co.in
kdservices.co.in
books.q-home.be
books.q-home.be
account.kdservices.co.in
Certificate
The complete raw certificate details for www.kdservices.co.in in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISBDvNIpdUdYNfsycc95WTDtQ6MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjAwMDAwMjZaFw0yNDA3MTkwMDAwMjVaMB8xHTAbBgNVBAMT FHd3dy5rZHNlcnZpY2VzLmNvLmluMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAvNTAya8jlrfYQhQVXeV6gkCdafkSSSKjHciCI5Hv+hlu2suvUHcpPQZv NV3lEwW2KifyGDZJHi7vuCMq5U5qs1hbbKgElU/JAMX8jUT9AYPFkmt80y8xGlX5 G3TktrfbWdb8fCZLw1v5mmt6InC9vZ1m7PTkK/V03ZZjPtcl9MgQhabKtOvH6sZg KYrEcIb/Ddzype7sf4594C5o5ggAkq5Zq7WFs2NLFzFhD/IBJNasRwVrGD9Sqnqb n1o3qYtDgUIMV9TqoSqeYdPNSXuVBTAcyJyclUJbKAVApJZz+5IbefiZmYlKgPVl u3X/HsIpLUU2sjubkZJE0ketldGgnQIDAQABo4ICcjCCAm4wDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBSD6hUaOpPqp9+GPe5PcPSILpGXQjAfBgNVHSMEGDAWgBQULrMX t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0 dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu Y3Iub3JnLzB7BgNVHREEdDByghdjcGFuZWwua2RzZXJ2aWNlcy5jby5pboIQa2Rz ZXJ2aWNlcy5jby5pboIVbWFpbC5rZHNlcnZpY2VzLmNvLmlughh3ZWJkaXNrLmtk c2VydmljZXMuY28uaW6CFHd3dy5rZHNlcnZpY2VzLmNvLmluMBMGA1UdIAQMMAow CAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYASLDja9qmRzQP5WoC +p0w6xxSActW3SyB2bu/qznYhHMAAAGO+QTQ9gAABAMARzBFAiA/eXvLHDRCwyeQ dp27s53uJ606Lz8rxzoEuDuYjdFxAwIhAPml/0f1vY+5Hdmc+4bXhpBok7G3lwI7 QuXrCssV1CYwAHYAGZgQcQnw1lIuMIDSnj9ku4NuKMz5D1KO7t/OSj8WtMoAAAGO +QTRaQAABAMARzBFAiACjWdtaS6+Rr0XSMirSdAIs5V83c1dc+12da9/SnRIXAIh AO1GSfq3w84e8f5qAPlFdqhot7r/iKzougCUWljp0+paMA0GCSqGSIb3DQEBCwUA A4IBAQC0eoX0/IV62ZwFCwBhwvn7l/3SKv/8nTovfN02tO6y/O0AyMRhzD3D8sO7 Q4Hw4wirF62cM4ycKDlce6bpbtPK2bTYndiIrYVMk3Ro88Htx8Y7fIz4L0gb+MAo /nFwKLbKTTRB0o6+p4DbMKsz6ADtM/taOzhDuaOSZPdP/+Uvu16cISR6mM//iZo0 vOvMQPsY3wAqeA6jEXG3RtUt7dIQc4BLax5Tjhr4O9AgM9z/U7bW3OvL9uR/wawi jXqbYr75B13f2QxK38utCx3xlyg1oZcyYBG6igJ7tk/+rxOTPe1I8kcdC0iTsTOq BNSD5qxXK3MYb1Eq+f714OZBt5h3 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNTAya8jlrfYQhQVXeV6 gkCdafkSSSKjHciCI5Hv+hlu2suvUHcpPQZvNV3lEwW2KifyGDZJHi7vuCMq5U5q s1hbbKgElU/JAMX8jUT9AYPFkmt80y8xGlX5G3TktrfbWdb8fCZLw1v5mmt6InC9 vZ1m7PTkK/V03ZZjPtcl9MgQhabKtOvH6sZgKYrEcIb/Ddzype7sf4594C5o5ggA kq5Zq7WFs2NLFzFhD/IBJNasRwVrGD9Sqnqbn1o3qYtDgUIMV9TqoSqeYdPNSXuV BTAcyJyclUJbKAVApJZz+5IbefiZmYlKgPVlu3X/HsIpLUU2sjubkZJE0ketldGg nQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 368798474721940838238880857057691880576058 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 00:00:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-19 00:00:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kdservices.co.in' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23837713786253084334942916716847804423513844772386246824990195634681563106650424694257111538805797555215515115518429048002335911091260342476411256230857006592954588141837860242480444969626270323451762289275262158141644263164955417699167319971211681026933127186655510932477781078587895422442572409882360907600568487850847201245542220177122665828665559101382808870638400593985198256926904151806381470761839940719895860607961406090777743688565193344332596454635265944052529626491176411181165955104354300173081716070523409879076440203910798750945192202324861741415457796094377320163374138653146082863756204950576472105117 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 83ea151a3a93eaa7df863dee4f70f4882e919742 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.kdservices.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdservices.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kdservices.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.kdservices.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kdservices.co.in' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ef904d0f6000004030047304502203f797bcb1c3442c32790769dbbb39dee27ad3a2f3f2bc73a04b83b988dd17103022100f9a5ff47f5bd8fb91dd99cfb86d786906893b1b797023b42e5eb0acb15d426300076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ef904d16900000403004730450220028d676d692ebe46bd1748c8ab49d008b3957cddcd5d73ed7675af7f4a74485c022100ed4649fab7c3ce1ef1fe6a00f94576a868b7baff88ace8ba00945a58e9d3ea5a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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