prestfelde.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:54:a4:1a:50:d7:00:7c:e1:75:fe:69:b1:bd:70:fd:6b:11 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prestfelde.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:54:a4:1a:50:d7:00:7c:e1:75:fe:69:b1:bd:70:fd:6b:11
Serial Number (int): 377250992579053839830304789979079011822353
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 32:f1:76:43:8c:b8:14:f7:b6:2f:6e:23:b0:a0:f4:70:a9:51:c4:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d4:a6:49:ad:eb:00:cb:d0:20:91:85:83:53:33:a5:8d:b0:84:8c:57
Fingerprint (sha256): 75:2e:8c:f1:20:ab:24:67:0f:2e:19:37:9e:c8:e1:49:1a:d2:8b:d5:bd:98:8f:80:93:b3:fd:a4:bf:1d:2c:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prestfelde.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prestfelde.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prestfelde.co.uk
www.prestfelde.co.uk

Other certificates including the domain name prestfelde.co.uk

(limited to 100 certificates)
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
cdn.prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
cdn.prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
*.prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
cdn.prestfelde.co.uk

Certificate

The complete raw certificate details for prestfelde.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377250992579053839830304789979079011822353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 16:39:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-03 16:39:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prestfelde.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742725386305177727603554987283202241549228694080355535646148049062474206328227827037981112675003086561714898504461910604954912784315173492530952814912119480947958512980664498650810562520890319163753445613399649167628442437208414027256627391001306447055884085591454691460226607696395667246354951076867883822846282961739048905258737012477626858159865888522922397153021325879010017517848081486085950724603970953853497981017747194403699182222711312528432411195133144184355141472413372469088801433993337771455774248619923567947882897244733250767671862708529769693404097609845837285462946763991425813557719447232042720467193186815934375156522581740113275529456943154406190406007235816994553240727298784413911663884725158731530560451031317433778472163146042356744744148950428522921762791190836023211931689096676158632686400146803001957487647621910870852536955809385614667248365867785221575541342640497731384808153288460408662758228647637174951806600855185828064139107266942202252332520460042848772322108278282143521512819180791248324941884905827821123751936105993305844820187482894863625539033444921641796162144370456134576439203401399658363669519499857860950950472487015387210382519554638852760629382931989457966002214503051448409507981761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32f176438cb814f7b62f6e23b0a0f470a951c4eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestfelde.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prestfelde.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184d912b39c00000403004730450221009e62f58d7cf0e5b3a7e855c0a22cf239aa60bda8859f73727dc0b4a9f6f6954102207bae4bcfe9231152f26383c3df5132cb3dc3e2eee2214344fc101f5e8c079b090076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000184d912b3c6000004030047304502207ef839d20e17cf1cc601871bb00d5e2d541df4f93536cff1bd50fc34764385ec022100b08f5d69181b9633ac2131a8fb17ae018ad13215c755eb45ea45aededc1f60f2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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