www.liquidlight.co.uk

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:c2:2a:2f:59:1d:eb:90:aa:23:ec:4d:a3:32:27:1c:76:15 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.liquidlight.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:c2:2a:2f:59:1d:eb:90:aa:23:ec:4d:a3:32:27:1c:76:15
Serial Number (int): 153183138535702601466082413869046041441813
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 09:62:47:c3:27:38:c4:72:ba:db:ad:a4:a2:26:43:82:04:4a:2e:d7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 75:f2:95:6c:a4:2c:16:6b:71:f6:a9:35:f2:44:78:e0:0e:fe:77:2e
Fingerprint (sha256): 29:ff:7a:88:10:af:41:e2:c6:ed:01:e7:8d:81:9c:35:28:df:7b:d5:5c:eb:03:6c:73:36:e4:63:01:97:9b:f6

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate www.liquidlight.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.liquidlight.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.liquidlight.co.uk
liquidlight.co.uk

Other certificates including the domain name liquidlight.co.uk

(limited to 100 certificates)
files.liquidlight.co.uk
files.liquidlight.co.uk
hub.liquidlight.co.uk
files.liquidlight.co.uk
hub.liquidlight.co.uk
files.liquidlight.co.uk
hub.liquidlight.co.uk
files.liquidlight.co.uk
files.liquidlight.co.uk
pdf.liquidlight.co.uk
files.liquidlight.co.uk
www.liquidlight.co.uk
hub.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
files.liquidlight.co.uk
files.liquidlight.co.uk
*.liquidlight.co.uk
hub.liquidlight.co.uk
files.liquidlight.co.uk
www.liquidlightgroup.com
hub.liquidlight.co.uk
hub.liquidlight.co.uk
www.liquidlight.co.uk
liquidlight.co.uk
hub.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
hub.liquidlight.co.uk
sni.cloudflaressl.com
pdf.liquidlight.co.uk
www.liquidlight.co.uk
hub.liquidlight.co.uk
www.liquidlightgroup.com
www.liquidlight.co.uk
www.liquidlight.co.uk
files.liquidlight.co.uk
hub.liquidlight.co.uk
pdf.liquidlight.co.uk
hub.liquidlight.co.uk
hub.liquidlight.co.uk
liquidlightgroup.com
hub.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
pdf.liquidlight.co.uk
files.liquidlight.co.uk
hub.liquidlight.co.uk
pdf.liquidlight.co.uk
files.liquidlight.co.uk
www.liquidlight.co.uk
hub.liquidlight.co.uk
hub.liquidlight.co.uk
files.liquidlight.co.uk
gichd.org
www.liquidlight.co.uk
files.liquidlight.co.uk
hub.liquidlight.co.uk
files.liquidlight.co.uk
hub.liquidlight.co.uk
files.liquidlight.co.uk
hub.liquidlight.co.uk
gichd.org
liquidlightgroup.com
www.liquidlight.co.uk
files.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
files.liquidlight.co.uk
files.liquidlight.co.uk
www.liquidlight.co.uk
liquidlightgroup.com
files.liquidlight.co.uk
hub.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
files.liquidlight.co.uk
pdf.liquidlight.co.uk
hub.liquidlight.co.uk
gichd.org
www.liquidlight.co.uk
files.liquidlight.co.uk
files.liquidlight.co.uk
www.liquidlight.co.uk
2022.gichd.org
files.liquidlight.co.uk
2022.gichd.org
liquidlight.co.uk
files.liquidlight.co.uk
www.liquidlight.co.uk
sni.cloudflaressl.com
hub.liquidlight.co.uk
www.liquidlight.co.uk

Certificate

The complete raw certificate details for www.liquidlight.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwq6dr80SUnL46OKXieHw
jgzfOaeCgQ0biD1iKfyypHa2G5KYm0kBOPtfMQe2TvJ8VXXI+S25iik7aSHwSPTS
eXVSxHJFBFw3Vnco/+AHYAXr6GDjf8kZ3gkv03cnMPrbAFEhmibb1Mgk7zZLw0up
j9MiwcKnLZT6jLdxQMv15aJUx+9rOrwiVR1gcmbASCI8RmF9G0S5HoyM+pvBlL6t
KaCgH6Ud+/h1oOTeF3smQyTWoeFf60nm3+fvJR/4AU2oU5wMxe3gUkbC16Aooriu
wtEDuYJPtcsrxh9bF/I8mSHsULWdLH6XJn5yHzU2Sx5UytCRuVB12HA5U/8glmK/
CrqTuzxV60MADXx+MbK9nLXH1L2cx+7HSNxgUBHLkHbBHHKq8VVAM9Q1yaYbnHRF
b4UHlI6P0jVXvYnPudaRtu/bRl76r0SAnLSNjHzFih5Mbr+uBvZYKx8keLwky7mi
eq1LNxMLPLHG5hvDANtLsgKCCc9tVIYGsPqXeklZYfp//BT7QyRX8aPJbTM9tWbl
zGz4Tlzk6I9DhCjGA33Oe4TEKoIzWvnO/WlmmBCFc/pS/DlQG/zIO9BoJzqnjvx+
MU865p5mJhLM8N/6fkDLtoQfMzLEQ91SGLdc0RNSt88mUmsNLPY6LiRz02U7SQ/a
zI+FFYw2NLIg+03/MgClfY0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 153183138535702601466082413869046041441813
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-07 16:38:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-06 16:38:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.liquidlight.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794233648339421905649581558490089864247031522747989022718501611715420844830151517993715872770801829665799616498176539056878785429498440494720750911385708802261207235228516248526488367323567238883036563412080613960185006458328019663446237220274241234107682093945977967272122109091554982291846533344445414052724993753467767032613590597964370912433512130037091193085314556587220750550050315104160494131623310977104349259547368460167651678050314647222312709167214760935811609382763747726792039763363385001160673575133841019478469202945444008828888843755728813616017021975891558040430001918203810431252835230478662507164296053277661610211854211896342229467910623006155686954854254761190148887153107231025882925071548079073251365439572455554214263714470055207105342777003971611839740726820962174290741972138082521883267602698630725514934001134601437557860108284251761483342906829379042622833142369749918217321641606938405915811080917376476168921424147662531769736145639087055659100739547186212105709641568867987089717401744146914676795156967026422088179392943197179456155579438127411214673963404099806184410119536244110057550652771317235256362596579256659082010118949907599823638860489760984078510250775305890229175965542950194977995849101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							096247c32738c472badbada4a2264382044a2ed7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liquidlight.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidlight.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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