kenwoodpartners.com

Issued by R3

About this certificate

This digital certificate with serial number 03:77:15:33:d4:27:b3:a2:82:fb:37:b6:30:9d:2a:be:12:56 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kenwoodpartners.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:15:33:d4:27:b3:a2:82:fb:37:b6:30:9d:2a:be:12:56
Serial Number (int): 301858642356940014195046339160875013640790
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:af:d6:52:02:33:0f:f9:4b:7c:2e:e0:ec:88:88:5f:9e:de:dc:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 73:5d:91:25:6e:fd:49:91:0a:df:d2:15:b5:45:64:be:a3:13:61:92
Fingerprint (sha256): 82:45:93:ca:5e:60:eb:80:86:2c:e1:f6:8b:8a:b0:b7:3f:79:d1:5e:b0:ad:a0:91:53:c1:3f:e6:be:12:43:71

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kenwoodpartners.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kenwoodpartners.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kenwoodpartners.com

Other certificates including the domain name kenwoodpartners.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for kenwoodpartners.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301858642356940014195046339160875013640790
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 07:14:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 07:14:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kenwoodpartners.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 770750130488143310542776480035565933041741866955528180057485956544887042222664790795777728381852447181631094997151544383403713852788870392532647321130815378696691234857198192706799962034543383275496744856390420176727210892480899778881584940949331239377004167282265704109344398148242620161062763331105427454101890485610601594767540213461224360291453635293364156052422076328850177224280613652964748644146228111967519929844111807799660811093995952874492196193665095216493610814535193945023131151358224047192797216748197677760535931398101293034554493791439029154657918093490235773310775164993598142099511153178177740307934580445520622430616093316214835077283370804282711240060994598935703469992029058881293179586377346941735264185156364509496285086646243505453673127060662339126609448271224752796351456082178484827192385171859896115395627373930787716137174666505749181930319319529051632935522555212706990062570920420013738976401837103145882947490186861868887302637067751074888506398624502130818987813178602304756239462095379609199151416947450036222110110919409433527876779374871378488602990597753373874020476855986089816776380441896051955465032817070218614280561409634395940366358187063770592386857751606696843413019355275106362176863927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29afd65202330ff94b7c2ee0ec88885f9ededc6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenwoodpartners.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018afee6d2ad000004030046304402207a4a44bd178f7c1435f172190d38a157f36b61ea2d408cee077159a5066567e502203870b801ee1bf9b8865a1acb8945f1dd7b35d3a7819fa7cfedf6c18d2195259300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018afee6d386000004030047304502200f01f8ee55d321c0690368c1630396f31ebe9d58e6226601b71bef299ea5d317022100a70b392e9dfe682f8d4181bf1fda50e59394a313b6eedf4f0bf8052d10148e31
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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