prestfelde.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3f:df:41:3c:91:a1:dd:2e:a6:74:79:9d:bc:b8:6a:84:cf was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prestfelde.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3f:df:41:3c:91:a1:dd:2e:a6:74:79:9d:bc:b8:6a:84:cf
Serial Number (int): 283071403482138458404673038650568470070479
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d7:29:3a:40:ce:e2:18:cf:6d:0c:dc:fd:6d:18:52:c8:e7:5c:be:7c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d1:e1:82:fb:60:7d:61:77:11:aa:21:fc:e8:df:84:6c:30:02:3b:f9
Fingerprint (sha256): cb:a6:45:10:07:15:90:25:10:69:e9:76:fc:f1:ec:e4:38:a6:c3:00:b8:2b:98:e9:db:f8:58:c5:9e:0a:d3:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate prestfelde.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prestfelde.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prestfelde.co.uk
www.prestfelde.co.uk

Other certificates including the domain name prestfelde.co.uk

(limited to 100 certificates)
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
cdn.prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
cdn.prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
*.prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
cdn.prestfelde.co.uk
prestfelde.co.uk
prestfelde.co.uk
cdn.prestfelde.co.uk

Certificate

The complete raw certificate details for prestfelde.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283071403482138458404673038650568470070479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-20 01:32:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-18 01:32:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prestfelde.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 901339646317802597274108039513597611149316603457239886001868690495837675479512216335455801332603989766091573820852854041062927021566962531743526483682263271448495013019093858625057825089467789649203415649643106969046101408563333586738414655121215527171827107078490990347909533886728016613838475251668050355725222795290037597806974476738708792924531730616519446888211064798071623401719052630969401609212878492738615126416874391973660273124725612828437531523623430181103076452555276488535744901342099651546809910082335270179178975006840849633732938630063906391793346811067422949806516776233869556654857002961070140293655740015953348529027353619340837734918756655584282446220166195602605165705019993689973882584841091705851059443579217457524373947480938727505314354306663031114157000213988846720661139161826082830050178225103459854624720874360869844155609730327026244049237084428429924903753196247314517970374901162894251836029210670730377899091849452225157763063858576953061579464288453087003903415590095479885309125701956882486902590330659026649536171139678893619672373246945589103747799929380914947988188968306338843527839058296921540422062547185473660831385839742166755140387701819899224842606073302567806245889093839887657447844841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7293a40cee218cf6d0cdcfd6d1852c8e75cbe7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestfelde.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prestfelde.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016de701ed710000040300473045022100de4695cf30dac0643d588379df57d7d1dc19e237b10a366fd36923c3aa4dea7102201d1ffd48bdc7c14a64260dcab4f36b76d1f0f1f436fe231c6bbba853ae0cbd64007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016de701ed640000040300473045022100dce38c5f4078bfca975f39f2a68c073c6c30d0f21678d43993051a9e974d07c902205fbd8fc5132d4b8161001e7b6ea76a9db0dfe694d7768e1629e3d28b3060d281
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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