mail.khandel-light.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:8e:6b:e7:bf:d5:d5:c9:2d:68:03:7b:28:72:17:77:0c:a7 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mail.khandel-light.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:6b:e7:bf:d5:d5:c9:2d:68:03:7b:28:72:17:77:0c:a7
Serial Number (int): 309800384605059305723868038535938032733351
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6e:6f:62:4c:18:bd:67:1c:2e:a3:bf:a1:93:09:84:6b:6c:a1:0a:a7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e7:b9:e7:ce:90:cd:3a:71:6c:ce:0b:0b:ed:c0:65:7d:94:8a:13:e0
Fingerprint (sha256): e2:d2:3c:ba:45:1f:2a:c6:5b:9b:c3:83:ba:c5:cb:be:9f:24:3e:e8:43:af:c3:dc:a0:7b:88:43:bc:b6:72:4d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mail.khandel-light.co.uk

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.khandel-light.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.khandel-light.co.uk
cpcalendars.khandel-light.co.uk
cpcontacts.khandel-light.co.uk
khandel-light.co.uk
live-khandel-light.kissdigital.co.uk
mail.khandel-light.co.uk
mail.live-khandel-light.kissdigital.co.uk
webdisk.khandel-light.co.uk
webmail.khandel-light.co.uk
www.khandel-light.co.uk
www.live-khandel-light.kissdigital.co.uk

Other certificates including the domain name khandel-light.co.uk

(limited to 100 certificates)
khandel-light.co.uk
khandel-light.co.uk
khandel-light.co.uk
webdisk.khandel-light.co.uk
khandel-light.co.uk
khandel-light.co.uk
khandel-light.co.uk
khandel-light.co.uk
khandel-light.co.uk
khandel-light.co.uk
live-khandel-light.kissdigital.co.uk
khandel-light.co.uk
fundraising.khandel-light.co.uk
fundraising.khandel-light.co.uk
khandel-light.co.uk
khandel-light.co.uk
www.live-khandel-light.kissdigital.co.uk
khandel-light.co.uk
khandel-light.co.uk
mail.khandel-light.co.uk
khandel-light.co.uk
khandel-light.co.uk
khandel-light.co.uk

Certificate

The complete raw certificate details for mail.khandel-light.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYR1zCjZZfXGEvYEX8u7
Tv2ST6CD2Ds8pcBrgR6kV8BJIVy9cLPna9kv5vRgNEd2pt1mPDC3sEtXV2eLdt9F
pY5wfZC0sUmDlUoHiXplVz2a+XN+v6ak/TeVnGUF5A/tKkAlaocm5VpbMZqkpDpq
e+FACtDIjGs7oHm4OZC2bs/VfEHAIL5BUe8gw7ljvMQ1UfKOAVexnCaOlw33i80s
rA7LRgzxgrZfCgARp0EywrmkEE8Q6xB17DxzctS0KR2la0iaTbJ+fB5r+P7Cy0+z
eoYJQ2DzuGCY12ScnYh7QMAZ+2CIQgzqRBw1rMf4uTLmWQwiMgPj8xiMpbwq4LiG
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309800384605059305723868038535938032733351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 00:40:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 00:40:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.khandel-light.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25439217830861024159357046048388635961314719348475000343946849128792717058405902640595460577596661664649318132511305497584759454148694361400929755692559945328626924235595009621123465677560037196770412800515085342281438620001037981356783841648625158671730077836241624478474218155985361935213825933041858750087690748374978069560099557080198127040567331992382977919374818997889725806160411354256360461568757386246584891298081639818580477616521513657608663104873740599374442936478263977228029926832581965300923175703854366424909456440046171527577632980321477626321329327379964037334604659294949278732226053327895215506977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e6f624c18bd671c2ea3bfa19309846b6ca10aa7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (350 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.khandel-light.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.khandel-light.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.khandel-light.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khandel-light.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-khandel-light.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.khandel-light.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.live-khandel-light.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.khandel-light.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.khandel-light.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khandel-light.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.live-khandel-light.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b02a45f180000040300463044022078a08c147b45a7e2b122642a88e1ff0d3e857a12a342e2413376722b5d9118c2022041787401d2b5ed57ef3de8aa06c65ec9c7c96f449599eb1cb4cf2982033a67d9007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b02a45ef5000004030046304402207fec216496f0dd8facdcc0f0bf0551302f0e040f6d21264ae0b04babfd103aaa022076684f71daad170149a7fe7b737906f3fa2ae02decc100cba27870ecab10ae55
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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