bokomo.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:ae:9c:a5:16:1f:5b:a1:dd:23:f4:52:87:81:74:76:25:10 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bokomo.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ae:9c:a5:16:1f:5b:a1:dd:23:f4:52:87:81:74:76:25:10
Serial Number (int): 407866492316305827487390359325001691571472
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:d4:24:49:4a:a9:b1:c1:cf:f1:d0:5f:9d:79:e8:75:65:41:8d:4c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 83:13:5a:f1:54:fe:02:15:73:a4:e7:18:91:e8:3b:76:f7:fd:7d:4d
Fingerprint (sha256): 4a:f0:68:23:00:3b:06:00:1d:8a:d8:bd:f7:14:67:5e:ea:3e:8d:44:03:2b:72:e0:d9:4f:74:bb:04:1e:cd:05

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bokomo.co.uk

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bokomo.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bokomo.co.uk
live-pioneer-foods-uk.kissdigital.co.uk
mail.live-pioneer-foods-uk.kissdigital.co.uk
pioneer-foods-uk.com
www.bokomo.co.uk
www.live-pioneer-foods-uk.kissdigital.co.uk
www.pioneer-foods-uk.com

Other certificates including the domain name bokomo.co.uk

(limited to 100 certificates)
pioneer-foods-uk.com
pioneer-foods-uk.com
www.bokomo.co.uk
bokomo.co.uk
www.bokomo.co.uk
bokomo.co.uk
pioneer-foods-uk.com
pioneer-foods-uk.com
pioneer-foods-uk.com
webmail.bokomo.co.uk
bokomo.co.uk
www.pioneer-foods-uk.com
www.bokomo.co.uk
www.bokomo.co.uk
pioneer-foods-uk.com
webmail.bokomo.co.uk

Certificate

The complete raw certificate details for bokomo.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArykOUqPGc2hp5DMSQDga
Z7ThumA2iI4aalx9T5AKMR8GQ/90Iv7zi3ZyFaE1sWBok4lHCQqFjg82z06JtmGZ
zW4kHR1DmNBkfiYQNvsVZG2ey5IWsOa/3MX3S8HK4Q1qOKGsqKY8qPOrIlUs0vWG
yp+hdcoM5tK4c7psrbhzdJegYLJexYzSQUgZHNiwQKfvsus8vlxYKYvMHV0khmcx
KBoOn5HZh8TqOoqUqtgL0ZZGBfWGqYSfx5LDuJdu5vSuI/Fz9DXk4kxTcPu6SPmc
69WIgzAhR2MAXPgYh3nTbDgXo4B9REFZ9oTNsk0ql+mzWcwOPv1rpTjiDUeLr07l
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407866492316305827487390359325001691571472
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-03 01:45:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 01:45:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bokomo.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22111948811814947533242697515706548755432709570654368316425215663594096364161601333450147789001162459691770172608962925566493547725638879127914772807874197740635421658613550789937522122350637393920704931376993734422143603958670289911177811144305811506126068846103715577582769152999139378097318485427505708596218182231751843158158981718989160863260417328113227607440883243350139254792457942885299766692617540540958737884636504810529816407826286268330591380663794238886180359553917811906809913484778293559938229113055387135548915419014330174536757103645733825599595573440096653817163501583369673262428647253313441424859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1d424494aa9b1c1cff1d05f9d79e87565418d4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (215 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bokomo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-pioneer-foods-uk.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.live-pioneer-foods-uk.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneer-foods-uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bokomo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.live-pioneer-foods-uk.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pioneer-foods-uk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001861529dcc00000040300463044022065debe2919ae0bf71e64a5d8eea900b3a6d0a322147981e3ea94020559d471ad02204520463bd1b34e91b0c4d8bd75ddd024ca381adec65dd99c3857bf94b020f5e7007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001861529dcce000004030046304402205a95a26feb89b901abb9000d2a5787ad361926f045eba41366cb1e03ba9944b002203c7a34728cc1052bc69d9c5f5f8b0dfd51e07af37aeaed0208900c08c1836fe0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00380d567c04916ce9b89b88aaa94c241290d655b4419e931622e81645c79bed174af8083c47ae94d86af09fb37708107f977f03e022fb82b9c0a23d8ac963909234e8b9a703e175daa68c9e1cb5fd72979e2f35199cebfc5038a683230537a0bf528d27744c44e7918288ea1a0df6af692c0ab693a8d63f6c8c532fb1acbcc90bff8e9820cbac90501ce28f347f462dd669966243d76f7f54d860aa96b01b3a35fb67fb60130698339f6fe196e7faa53a720e8d4c7d101646105606afe1959debf2e668584bb7427362c4ea2949cb6436895aa8b98b16286c881733d1bbeb814d81765e2ff05fa8503ef72945da07365851bd2599701476a654102f64f1a8d828