lightingthefuture.org.uk

Issued by cPanel, Inc. Certification Authority

About this certificate

This digital certificate with serial number fc:76:02:a4:36:00:28:b5:77:d3:fc:24:21:c6:ea:68 was issued on by cPanel, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lightingthefuture.org.uk

cPanel, Inc.

Organization: cPanel, Inc.
State / Province: TX
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fc:76:02:a4:36:00:28:b5:77:d3:fc:24:21:c6:ea:68
Serial Number (int): 335578199542056152047125338974295878248
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e7:ad:66:f1:63:1f:28:10:0a:13:60:96:e0:f2:dd:23:52:d0:f8:3b
AuthorityKeyId: 7e:03:5a:65:41:6b:a7:7e:0a:e1:b8:9d:08:ea:1d:8e:1d:6a:c7:65

Fingerprint (sha1): 84:f0:01:9d:1c:d7:57:38:a9:93:24:21:41:6f:ae:5e:24:9a:bf:e1
Fingerprint (sha256): 57:9d:c4:5f:aa:ff:a8:35:1b:50:30:6f:c8:be:1e:1e:f7:2d:4e:45:ac:09:be:73:ee:c0:a1:d2:0c:44:26:e7

Issuing Certificate URL: http://crt.comodoca.com/cPanelIncCertificationAuthority.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/cPanelIncCertificationAuthority.crl

Check the revocation status for certificate lightingthefuture.org.uk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lightingthefuture.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lightingthefuture.org.uk
mail.lightingthefuture.org.uk
www.lightingthefuture.org.uk

Other certificates including the domain name lightingthefuture.org.uk

(limited to 100 certificates)
lightingthefuture.org.uk
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
lightingthefuture.org.uk
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
lightingthefuture.org.uk
lightingthefuture.org.uk
sni95075.cloudflaressl.com
lightingthefuture.org.uk
lightingthefuture.org.uk
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
lightingthefuture.org.uk
sni95075.cloudflaressl.com
lightingthefuture.org.uk
sni95075.cloudflaressl.com
lightingthefuture.org.uk
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
lightingthefuture.org.uk
sni95075.cloudflaressl.com
lightingthefuture.org.uk
sni95075.cloudflaressl.com
lightingthefuture.org.uk
sni95075.cloudflaressl.com
lightingthefuture.org.uk
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
lightingthefuture.org.uk
lightingthefuture.org.uk
sni95075.cloudflaressl.com
lightingthefuture.org.uk
sni95075.cloudflaressl.com
mail.npwea.es
sni95075.cloudflaressl.com
lightingthefuture.org.uk
sni95075.cloudflaressl.com
lightingthefuture.org.uk
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
sni95075.cloudflaressl.com
lightingthefuture.org.uk
sni95075.cloudflaressl.com
lightingthefuture.org.uk
www.lightingthefuture.org.uk
sni95075.cloudflaressl.com

Certificate

The complete raw certificate details for lightingthefuture.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9plQIvVJ8e6wA4eNyXl
I0FOFvN7ltwhN1aQ13d4ne4R9+F3EhQ0IsQN2+UTYDBQh7Y/g8/k+LiTSO0nIvi8
tED6ABWthts4UvffXvnCzuEV1jLYG0s/XhHVDpIb+Y3HhKqtko0zCh5VBW/pVelH
gGKW5DmF2P9BBG6gGAXNhSy/fPaxuTtwR6/8FEkJZfvyF3j/+k1j86eeIxQ31a2i
mCRG8WNg6JAl4b+PbfOd6aAWmy2d2VUj6DnnPy5Ed/u+qQ0ORKOKDhb60+Z0p6wA
slRi00Bkg+i/UNsY/fkZMaZTKN10mA2Vd7yFbZ3z35z8qm4O5Cw4GLvqQLc6C2d6
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335578199542056152047125338974295878248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc. Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lightingthefuture.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22199398211914191802600442030638770031929708988090098028606309910535163566044096454692623805658629565904432716876388852795067578295314707048453876601861489800346370984780781553628613964164779159915274143944003466511736382675633220559022095552886444803646279260306107204308501145597311214952632230691660444152875877322038089665519190286192367185063171664141942399929649648499191961497140717246051951132700302446737375608337395957638527971066408293111175044418860637171406524912775399149726044301582045305200506252116578142211372919004147611986644115186948616403856870757953660420953228657484567925052670255322592934539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7e035a65416ba77e0ae1b89d08ea1d8e1d6ac765
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7ad66f1631f28100a136096e0f2dd2352d0f83b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.52
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/cPanelIncCertificationAuthority.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/cPanelIncCertificationAuthority.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightingthefuture.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lightingthefuture.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightingthefuture.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704dee1bbd00000403004830460221009df2eaca235820b90f4a703dcfc71ec1a98b32bd7b59b738594b8b46e721b22c0221008c85f574023ebd99f1722e6c4acf6ea0ee9635c416ea6d2d952edaae2b7ba527007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001704dee1bda0000040300473045022100e9635c76ab9eb0dd6086ecb516073f464a764c50455970f5cb359727cdd0f4b00220170ad5552c104f828ad60ab2d0c712fb549a4f9487fe0e9a4fccecb063ec963c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007c25e3ebf7291cb10674667d59418d6102258fc1876f558e8132f35c63df8b65b464609373235675ff319bf9b7c9d1c49248f7ca001b0097723562971f9aacd984928cf8ea3c3c8c4b41f2ae96202c6f08a663262717bb5179076192cab4c5d63948fe8ba6487955ae143e7c042d94244fe77ce5327b386adc8bf939035527df0b4ac84c9e67e39a0b66f67cd157b7531b3e2d69cd70dd7d757ff0e16fcfefd3e6e2dd534f44cfa855e94d5631269340f325f8582a9c0f7a1df64fd0c64a21a4e35e26f0c1d20616a2b6f156becc3dd2ed7d50c2db7fe4a4f3f5d78ed7751680a8291806f085e2b0004aeda939c0c2002ee45399a435517476e4688d04312599