www.klfit.co.uk

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 0b:17:d4 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=r6yE4EPYp1JoeFG2f7GdOgXpBBeFdtOs,CN=www.klfit.co.uk,OU=GT28320504+OU=See www.rapidssl.com/resources/cps (c)13+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:17:d4
Serial Number (int): 726996
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: e7:76:33:68:00:37:95:5a:2f:e7:1e:b3:a5:72:59:17:89:b9:32:10
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 6c:43:e1:87:a8:50:80:de:c4:d7:0a:0f:17:29:ff:2f:1f:61:fc:9d
Fingerprint (sha256): 65:08:c7:aa:88:3c:9a:98:33:b0:70:be:fd:17:aa:32:71:dd:77:88:c2:68:56:b3:33:4e:0f:3f:d3:60:ef:b7

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate www.klfit.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.klfit.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.klfit.co.uk
klfit.co.uk

Other certificates including the domain name klfit.co.uk

(limited to 100 certificates)
buzera.pl
quickinspect.me
micw.justoahi.com.ar
closedirt.com
components.stylelise.nl
www.usersmanager.com
www.ecellhbtu.in
clickfactory.co
klfit.co.uk
invite.fintally.uk
lynx.pub
stag.www.mirageid.com
www.yourlimitedlife.com
closedirt.com
www.studioskyfox.com
complice.app
www.aaijigroups.com
jysinfotech.com
letsquiz.tk
deliveryconnect-ca.datatracbeacon.com
www.reasonauts.com
edit.surv.app
www.reasonauts.com
glemmo.nl
www.eventsandtickets.nl
coopertrans.ideiadtc.com
diktantai.lt
klfit.co.uk
rdluna.info
omnistuffstore.com
escritorio.bestwebfast.com.br
onegraph.com
doggomotion.ch
www.mojiseed.com
koronis.app
www.dramatic.app
efardispatch.com
jysinfotech.com
www.klfit.co.uk
wpnedir.com
www.meup.com.ar
video.mesbro.in
myfan.ai
taylors.internspoon.com
ntinfo.co.kr
vacamo.app
myfan.ai
app.remindmetobuy.com
5730trainingclubribera.turnosweb.app
ishaper.surf
www.mojiseed.com
alpha.blog.timothyjordan.com
timetrek.kr
exchange.kickstart.finance
link.everready.ai
components.stylelise.nl
www.astroholidayz.com
complice.app
auth.dev2.photorobot.com
auth.dressup.africa
demo.sokrates.co.id
www.resourcetracking.app
donaeldtheunready.co.uk
omnistuffstore.com
api.specless.app
koronis.app
www.hardbox.eu
link.everready.ai
exchange.kickstart.finance
enclavia.org
envelope.app
www.aaijigroups.com
onegraph.com
donaeldtheunready.co.uk
www.klfit.co.uk
demo.sokrates.co.id
www.haydn.co
taylors.internspoon.com
glemmo.nl
excellentcleaners.com
agladius.com
excellentcleaners.com
enclavia.org
vaki.co
wpnedir.com
www.pazzovero.com
www.mikestrange.blog
api.specless.app
spookyeffects.fezzle.dev
www.lunchbestellen.nl
www.pttepworld.com
kawari-uat.iamconsulting.co.th

Certificate

The complete raw certificate details for www.klfit.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4CII+KT4FYmm5vX5BmR
wp7tUI5vY/I3tDRS95pNf+btsnJCrdBf5Za8reliF2UsQvtbNZHT8BXrp+RWBIto
uBsO/30PUzu0M9w9KYhnkrP/GoOEEBeHd6uAi2wM76E6EKmIDPynw9dX1GXiS5qe
PHWYaxslwd1NAG2kFDzmpEDOeZo1iyXftA59rS3nECrmSbWcHTQPwhf7P2621eUY
tyl1/ZEcaSyl0XCM+GrglriSm21gJowUgcy/H4CGwsQ3Li3Kd2aYr+OG3M64h03I
ah+xA1cYg0BQCplvy/ZR9WThOTilkkbI0hmvdlUqMrSY16ah/8p9pWbWJm5iGFHp
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 726996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-16 03:05:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-19 07:06:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'r6yE4EPYp1JoeFG2f7GdOgXpBBeFdtOs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT28320504'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.klfit.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20640225101102537694601623386164224918434128691134725813836909308432922823244610814397194629762555090002713518476206630038770101267273142142875008881377247585564501593677649681369669852935012874708571848510862313708238801660972706360071492034243965421459004566470286824028856287026095350667612653071462989322250489218509068023040288620770048941502291195244279994724745343079016290169168725720115978496739857847424020491204692520283327069466398861092202045501907109549836648999723185241851415797134557081921186040408239842190919845027819821738738946190361244303835716412801253975340757696618365994249097545730667702531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klfit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klfit.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e77633680037955a2fe71eb3a572591789b93210
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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