yushikai.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:03:45:58:2a:ed:04:b8:08:a4:55:bc:94:00:3f:44:d7:74 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=yushikai.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:03:45:58:2a:ed:04:b8:08:a4:55:bc:94:00:3f:44:d7:74
Serial Number (int): 262449879420516003882774771854790277519220
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:54:41:95:19:34:e6:d9:d2:2e:cc:10:03:f6:82:f7:e5:a8:0b:d2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7a:98:28:bf:ec:e2:f8:39:fb:d2:e7:dd:40:5a:68:dc:bb:11:8e:04
Fingerprint (sha256): 5f:cb:ac:b3:d8:65:b2:54:b6:27:50:7c:13:35:c6:4d:5c:5f:6c:e7:59:31:b1:ea:15:25:e8:60:12:08:be:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate yushikai.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yushikai.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.yushikai.co.uk
yushikai.co.uk

Other certificates including the domain name yushikai.co.uk

(limited to 100 certificates)
www.yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
www.yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.marketmuscles.com
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
www.yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
*.yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
*.yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
*.yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
www.yushikai.co.uk
yushikai.co.uk
actionfitnessmartialartsfl.com
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk
yushikai.co.uk

Certificate

The complete raw certificate details for yushikai.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262449879420516003882774771854790277519220
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-02 01:40:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-01 01:40:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yushikai.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766972841429375683396831470675003616088244101391685842335242442365529347472013706317388282669954631686226219651191405918094672302942440352906815896395354154735460558915247780451993125395744702201469807669072338022488105854793296943741618274234144715619063382712522109314133886190483541207744558962496267039056250736634018860593639350219755079783327346990461098554725252763795389783951169457770366829692731622411447248062052423852312121646588637700869010616183597495567047855148517945388457881142153396429030566697759580120575226527437230346029944121730676337715904348931396316084588194637601443844734787821402970692947627805119604375470086922425534039608396197759514902073408263954226964400477401415516504950903226598990725375362557070868986466113467646100440064646548784447230744548082424407766610223606078463825212880117959022325733531751581156004813155723983203029312928114137229241643125119106938060818469177446476709446953145745265511970647896037599868720580316388702594305095951394120914299575142253047572027498212141112764817454630797069031061521521468440639521799145335046381889563459028624457736952715096153665270605689775850948997744034840679555215652854618293274800972710247521753994153870483120597680818849544716265626139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							815441951934e6d9d22ecc1003f682f7e5a80bd2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yushikai.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yushikai.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cefd863f30000040300483046022100ffff0d7f2ae0d2117695f5d3498dc9262c3dc337867fca6222b14e1fc0390ca90221008dbf90ea3b176b5f4eb8d25bc9bfdb471463964b7ba5485daaa4beb0d1052ff6007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cefd865c60000040300483046022100feee2b8b9add3c23d68489fb1fff3d3d3180c6da295d2b360e4d613712d49b7f022100fe38671d2748c36232f63ce21705ab113fa82fd4b8b6939369d82634baece6d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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