www.candrpowdercoating.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f8:dd:0b:b7:96:42:05:ca:2f:29:77:9e:42:9c:54:14:92 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.candrpowdercoating.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f8:dd:0b:b7:96:42:05:ca:2f:29:77:9e:42:9c:54:14:92
Serial Number (int): 433132990949353250671888815460070423008402
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d6:0b:67:06:7f:71:6e:a2:6f:b9:4d:37:ae:fa:2e:10:22:86:25:c6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:32:79:c2:80:fa:a7:92:ee:d7:92:2a:26:8d:e2:92:80:46:f5:87
Fingerprint (sha256): 68:86:7d:72:44:f2:d2:04:33:c7:db:2a:6e:c7:5e:c1:1d:b9:7f:52:d6:73:a9:a4:42:5f:9e:82:27:a6:91:0b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.candrpowdercoating.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.candrpowdercoating.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

candrpowdercoating.co.uk
www.candrpowdercoating.co.uk

Other certificates including the domain name candrpowdercoating.co.uk

(limited to 100 certificates)
www.candrpowdercoating.co.uk
www.candrpowdercoating.co.uk
candrpowdercoating.co.uk
www.candrpowdercoating.co.uk
www.candrpowdercoating.co.uk
www.candrpowdercoating.co.uk
candrpowdercoating.co.uk
www.candrpowdercoating.co.uk
www.candrpowdercoating.co.uk
candrpowdercoating.co.uk
candrpowdercoating.co.uk
candrpowdercoating.co.uk
candrpowdercoating.co.uk
www.candrpowdercoating.co.uk
www.candrpowdercoating.co.uk

Certificate

The complete raw certificate details for www.candrpowdercoating.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433132990949353250671888815460070423008402
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 15:44:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 15:44:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.candrpowdercoating.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730574247094443883852411199743327483510054235036230126772937023501487016379451298354314352300002208197459927209820739929957746872620914128621430358795090413516718246185513778742877287415201853520692143685423543897434170461874201437772910663017701855462732341472756109309223748286389153375965653749485581441334529292300010947883631154023294650537152407701571803132381921067078701692688600289196008008286697333179748355471742615017971226899726426664185712666824538534634591967281333766724818998360767147396583642673585182769640036657905333997126448623516715790671369570141543616741493865046119184021984551089128591363267971278982170354959772020067940268339085182682558636447691753491769680030160423529544301983632872267317626884919271863579343086727795522648263649318569108433196180524901264392257062870499335747567912420494372587747181650207689247650991500768741970313448747804075368023847287129727380133658667670061425267032609644034485434056785115029611595193556329805929812970539035080235650975939415421794902930991697793260539353654056401238129054735095905254185530556526089060691225793691378961221665329601101081297916962062864379428147730552743655006219533228512428702941018283796671814875350423394586835901538643064460681803319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d60b67067f716ea26fb94d37aefa2e10228625c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candrpowdercoating.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.candrpowdercoating.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f43183fad0000040300473045022018caaa1df71bc468f81bec36613a0947acd6320d9fa662d984e20434a523519e0221009d5d487496044e9d55a3772eb91600570a97f89e83fcc6688cb6ce17d09f1b24007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f43183f9f000004030047304502206f0f697fdeeafcf111195780cee045e54de708a5e31d91c1ba3c8011548a9bbd022100c236f0dfd5e210fa7c1147db6f75791079c57b2e98c9d075c07a170acfeab036
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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