*.sussexdesigns.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:51:8b:60:ec:98:72:44:6c:39:16:cd:3e:e1:6a:3d:5c:01 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.sussexdesigns.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:51:8b:60:ec:98:72:44:6c:39:16:cd:3e:e1:6a:3d:5c:01
Serial Number (int): 289084995466515989303297463917686332152833
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:f3:4f:c9:af:4b:ef:a6:5d:db:60:2b:5d:05:fe:b7:15:95:06:a8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 99:d5:02:d2:42:81:e7:22:c4:b9:59:d6:55:de:b8:80:3d:4a:4b:de
Fingerprint (sha256): ce:95:c8:15:70:a0:f2:ea:eb:b7:49:ec:ee:ad:22:d0:75:30:39:83:6f:43:9b:c8:29:c2:68:c2:3b:5b:39:bf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.sussexdesigns.co.uk

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sussexdesigns.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1066bakery.com
*.galenite.co.uk
*.jcredwood.co.uk
*.surreysportsmassage.com
*.sussex-designs.co.uk
*.sussexdesigns.co.uk
*.time4ulimited.co.uk
1066bakery.com
galenite.co.uk
jcredwood.co.uk
surreysportsmassage.com
sussexdesigns.co.uk
time4ulimited.co.uk
www.1066bakery.sussex-designs.co.uk
www.colourthirst.sussex-designs.co.uk
www.galenite.sussex-designs.co.uk
www.gunnenew.sussex-designs.co.uk
www.jcredwood.sussex-designs.co.uk
www.qualiturnbuild.sussex-designs.co.uk
www.surreymassage.sussex-designs.co.uk
www.sussex.sussex-designs.co.uk
www.sussexkentdrainage.sussex-designs.co.uk
www.time4u.sussex-designs.co.uk

Other certificates including the domain name sussexdesigns.co.uk

(limited to 100 certificates)
sussexdesigns.co.uk
sussexdesigns.co.uk
qualiturnbuild.sussex-designs.co.uk
sussexdesigns.co.uk
sussex.sussex-designs.co.uk
sussexdesigns.co.uk
sussexdesigns.co.uk
sussexdesigns.co.uk
sussexdesigns.co.uk
sussexdesigns.co.uk
jcredwood.co.uk
sussexdesigns.co.uk
sussexdesigns.co.uk
sussexdesigns.co.uk
sussex.sussex-designs.co.uk
sussexdesigns.co.uk
rejuvenatesussex.co.uk
sussexdesigns.co.uk
sussexdesigns.co.uk
sussexdesigns.co.uk
jcredwood.co.uk
sussexdesigns.co.uk
*.sussexdesigns.co.uk
sussexdesigns.co.uk
sussexdesigns.co.uk

Certificate

The complete raw certificate details for *.sussexdesigns.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMusejwYwnUNOtU2imnY
3HtD3fauD5fSOeZ7VSXBbgMB/pfoolEmT6lQAXxin5FcHn+fJovonb9HOmna3eev
i0d2T6BS0lKPSViJjP2S5DY0hl4P1nmn28VOwca7Cn5P9126KlXiKSx8CRFYD7FW
8q0uaqKdoNXAqq1OaeLq5GhZi57e1z6H5uAfYyZJMY8GutAs0YnHvN03MTZPywtH
IULputc5MeeWasSdwAj9clpd0Iv+uk29Ivv0w9UPHd7QSa1AKEzfXrpJDlq8bk81
0/knTesyQApbGzwFbOHqk2JBwnJheKd5xA29DpJdJ6f/arGfmBc0rbEqM0Sr819u
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289084995466515989303297463917686332152833
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-05 02:34:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-03 02:34:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sussexdesigns.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24843143037891151888386107633966700301390483266482956588021914898211751138701515978736846692107995617920543511156229298499404882649323905351745887036898174749178281212759748812921565353324097336935242445064752684188208925618417107294635434910529242305454444849999308308667223461834835451824980631786133556612918200711591322455877986075378592753128987929239866004214481055805106361279022154853056007019303684677849728880574038796890529782263293580856864902308468153639390851335022079441629329013932260627809200123526110368601135454643554261755193280621415892633038733466535688896263371538129954910396259922299416702537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8cf34fc9af4befa65ddb602b5d05feb7159506a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (646 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1066bakery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galenite.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcredwood.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surreysportsmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sussexdesigns.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.time4ulimited.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1066bakery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galenite.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcredwood.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surreysportsmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sussexdesigns.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time4ulimited.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1066bakery.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colourthirst.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galenite.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gunnenew.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcredwood.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualiturnbuild.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surreymassage.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sussex.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sussexkentdrainage.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.time4u.sussex-designs.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186afd5b141000004030046304402203368abeeb371b2c817787d7c76d535ec90167a0c8b2b00a7791fb1a4694e3e650220677c8f7f4e943b756e9f49d6a2454e1363ac3b90ebbfea088cec36c7f6c3e1b8007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186afd5b17e0000040300473045022055a8990384abfaa1db95f192f454b288aab6b48af80bcb25ad16b21f2f0b9d84022100f74c4c79d59bf73f2b3ed3cc4682697b7c64f7eee8f6e9dbbec49eccc9141f25
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003b19b30815a94b94abff14edd0b826592931a564fbb5a6d9ba47f16f3583396c2b114a6effb61899b6c53da84dc69a2318ef38aef46fb6ba13231a3b74c12dff033c08e02d089dab7485af71a732b7fe28716a89139e603902ab6f81bebb98d0a4dd19007b7088d4a6f24e62bcd92aa8f1e3bf4962987aa449bc28e9a1fba372a29d90806a2ec0abd1f776f579d3ab279292bf37d79c0a93dc582c8332126f20b2c7730d59bfcc3902c35bc18f363f2019cfc5fea9dd7ff70a60594a04ef3ffd9246846837768d6be6ae6fe520effd645aa836c5983f348b237c6d7e65f026850910d559480968e01fce90ef6cf0bf2228e6274fbf18f7ceb6a34f2e55538d09