www.liquidlight.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e5:eb:b5:c4:ef:39:ae:dd:1b:df:6e:98:55:b5:40:40:e1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.liquidlight.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e5:eb:b5:c4:ef:39:ae:dd:1b:df:6e:98:55:b5:40:40:e1
Serial Number (int): 339574832199222163306363806458779870970081
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:62:47:c3:27:38:c4:72:ba:db:ad:a4:a2:26:43:82:04:4a:2e:d7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 70:fa:9f:d6:33:07:4f:33:df:d0:80:38:67:16:62:e7:4b:3b:18:77
Fingerprint (sha256): 36:2b:2e:0e:de:18:ba:93:92:cc:98:07:29:07:fe:5c:c2:ea:8a:79:c2:43:6b:bf:d8:94:57:04:b5:68:4c:75

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.liquidlight.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.liquidlight.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

liquidlight.co.uk
www.liquidlight.co.uk

Other certificates including the domain name liquidlight.co.uk

(limited to 100 certificates)
files.liquidlight.co.uk
files.liquidlight.co.uk
hub.liquidlight.co.uk
files.liquidlight.co.uk
hub.liquidlight.co.uk
files.liquidlight.co.uk
hub.liquidlight.co.uk
files.liquidlight.co.uk
files.liquidlight.co.uk
pdf.liquidlight.co.uk
files.liquidlight.co.uk
www.liquidlight.co.uk
hub.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
files.liquidlight.co.uk
files.liquidlight.co.uk
*.liquidlight.co.uk
hub.liquidlight.co.uk
files.liquidlight.co.uk
www.liquidlightgroup.com
hub.liquidlight.co.uk
hub.liquidlight.co.uk
www.liquidlight.co.uk
liquidlight.co.uk
hub.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
hub.liquidlight.co.uk
sni.cloudflaressl.com
pdf.liquidlight.co.uk
www.liquidlight.co.uk
hub.liquidlight.co.uk
www.liquidlightgroup.com
www.liquidlight.co.uk
www.liquidlight.co.uk
files.liquidlight.co.uk
hub.liquidlight.co.uk
pdf.liquidlight.co.uk
hub.liquidlight.co.uk
hub.liquidlight.co.uk
liquidlightgroup.com
hub.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
pdf.liquidlight.co.uk
files.liquidlight.co.uk
hub.liquidlight.co.uk
pdf.liquidlight.co.uk
files.liquidlight.co.uk
www.liquidlight.co.uk
hub.liquidlight.co.uk
hub.liquidlight.co.uk
files.liquidlight.co.uk
gichd.org
www.liquidlight.co.uk
files.liquidlight.co.uk
hub.liquidlight.co.uk
files.liquidlight.co.uk
hub.liquidlight.co.uk
files.liquidlight.co.uk
hub.liquidlight.co.uk
gichd.org
liquidlightgroup.com
www.liquidlight.co.uk
files.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
files.liquidlight.co.uk
files.liquidlight.co.uk
www.liquidlight.co.uk
liquidlightgroup.com
files.liquidlight.co.uk
hub.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
www.liquidlight.co.uk
files.liquidlight.co.uk
pdf.liquidlight.co.uk
hub.liquidlight.co.uk
gichd.org
www.liquidlight.co.uk
files.liquidlight.co.uk
files.liquidlight.co.uk
www.liquidlight.co.uk
2022.gichd.org
files.liquidlight.co.uk
2022.gichd.org
liquidlight.co.uk
files.liquidlight.co.uk
www.liquidlight.co.uk
sni.cloudflaressl.com
hub.liquidlight.co.uk
www.liquidlight.co.uk

Certificate

The complete raw certificate details for www.liquidlight.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339574832199222163306363806458779870970081
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-13 10:10:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-12 10:10:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.liquidlight.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794233648339421905649581558490089864247031522747989022718501611715420844830151517993715872770801829665799616498176539056878785429498440494720750911385708802261207235228516248526488367323567238883036563412080613960185006458328019663446237220274241234107682093945977967272122109091554982291846533344445414052724993753467767032613590597964370912433512130037091193085314556587220750550050315104160494131623310977104349259547368460167651678050314647222312709167214760935811609382763747726792039763363385001160673575133841019478469202945444008828888843755728813616017021975891558040430001918203810431252835230478662507164296053277661610211854211896342229467910623006155686954854254761190148887153107231025882925071548079073251365439572455554214263714470055207105342777003971611839740726820962174290741972138082521883267602698630725514934001134601437557860108284251761483342906829379042622833142369749918217321641606938405915811080917376476168921424147662531769736145639087055659100739547186212105709641568867987089717401744146914676795156967026422088179392943197179456155579438127411214673963404099806184410119536244110057550652771317235256362596579256659082010118949907599823638860489760984078510250775305890229175965542950194977995849101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							096247c32738c472badbada4a2264382044a2ed7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidlight.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liquidlight.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003ea0652e320e1ec4ba967c439fac05cb34879d1acb763c82db7935c6268c6ac31f78e41dcabe7417679ac81d96731d22448e7f35c9685006db556b05acf26984a5743a39b9f0a2de82a494862dbfc22a85f3e9222038de5ab3cbc7a62f95d9df630feb1482369b5808d02c67d0798bc185c879a1f0eefedb6487bac8fd8a3329241ac0ae13d3143b8d0069bdc0aa44aa7ca16812dd07d5ca4837d2c14636f0a4531d4ccd4d6ca07712b3c7f77581398ea679514cf08c1db1c2755b2f963d90e12e54aa22b9271d09d0ce6754ae478c3baad3ecb6198727548b824b107f362ee1c04c079ae0686d8f86bb6d068e57823482bcfa649e434f40f6d94f96776edcf5