*.scottbaldinodesign.com

Issued by R3

About this certificate

This digital certificate with serial number 03:88:3f:88:3e:3d:6b:89:3a:76:be:77:73:14:8c:ce:f1:24 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.scottbaldinodesign.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:88:3f:88:3e:3d:6b:89:3a:76:be:77:73:14:8c:ce:f1:24
Serial Number (int): 307699708475011175542190623487161829093668
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:d1:d2:fe:f2:1d:54:6d:df:83:ba:20:a3:f8:cd:04:b6:54:d8:1b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ec:5c:18:cc:60:8f:e5:f6:fc:95:bb:3f:c5:5c:27:61:a9:6f:1c:d3
Fingerprint (sha256): 00:84:e2:e4:9b:cc:9e:cb:5e:8f:0c:88:6f:98:da:2f:30:84:4e:24:0f:44:18:a1:6a:2e:7f:bb:2a:3a:c7:3b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.scottbaldinodesign.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.scottbaldinodesign.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.scottbaldinodesign.com
mail.zud.zbf.temporary.site
scottbaldinodesign.com
www.website-a953332f.scottbaldinodesign.com
www.zud.zbf.temporary.site
zud.zbf.temporary.site

Other certificates including the domain name scottbaldinodesign.com

(limited to 100 certificates)
*.scottbaldinodesign.com
allenfamilydmd.com
brownandbrownbodyshop.com
brownandbrownbodyshop.com
onevenduerange.com
allenfamilydmd.com
thecharlestonroofingcrew.com
brownandbrownbodyshop.com
charlestondogswimming.com
charlestondogswimming.com
scottbaldinodesign.com
www.freeholdfocus.scottbaldinodesign.com
www.freeholdfocus.scottbaldinodesign.com
www.thecharlestonroofingcrew.scottbaldinodesign.com
onevenduerange.com
brownandbrownbodyshop.com
onevenduerange.com
brownandbrownbodyshop.com
scottbaldinodesign.com
tomtartaglino.com
allenfamilydmd.com
tomtartaglino.com
scottbaldinodesign.com
tomtartaglino.com
tomtartaglino.com
scottbaldinodesign.com
allenfamilydmd.com
coffinslide.com
tomtartaglino.com
www.scottbaldinodesigns.com
allenfamilydmd.com
tomtartaglino.com
scottbaldinodesign.com
allenfamilydmd.com
scottbaldinodesign.com
jlholmeslaw.com.scottbaldinodesign.com
johnsingletaryformayor.scottbaldinodesign.com
onevenduerange.com
brownandbrownbodyshop.com
www.beastfight.scottbaldinodesign.com
allenfamilydmd.com
scottbaldinodesign.com
scottbaldinodesign.com
tomtartaglino.com
allenfamilydmd.com
*.scottbaldinodesign.com
allenfamilydmd.com
onevenduerange.com
scottbaldinodesign.com
allenfamilydmd.com
www.beastfight.scottbaldinodesign.com
www.beastmodemma.scottbaldinodesign.com
www.charlestondogswimming.scottbaldinodesign.com

Certificate

The complete raw certificate details for *.scottbaldinodesign.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISA4g/iD49a4k6dr53cxSMzvEkMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA2MDIxOTAxMjdaFw0yNDA4MzExOTAxMjZaMCMxITAfBgNVBAMM
GCouc2NvdHRiYWxkaW5vZGVzaWduLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMwXyV1KDIcm8CIICzTtqXMjEJup44ARw2LcgfOx8PLxYg4yz3O4
51wW9ESlUnwxjtXSS31XM3Mw6kXdbQlq8O1qppufXvPaPu418RK7Qm9vvUmCiBoK
qUvOmGD3t277fWTX5MrgRLAT8oUVSsTXz3V8txo1eze3RhNODR+3bPEpKtCdRfqo
hXVjEO25KzXTrKshiRYKlH4leF0o8rvLH6JF5n/oxmjw0HzH8lU8GtzXG6IYw0PR
3DNO2LHUF42Wuw6Q7MRZGBSN/Al7Y5b9uYex4ksKqs/zmBIkXvW49s8q0QC7qkGm
epGY/ZIfhjPb9AV/U9MECKXfrR7e/GncuTMCAwEAAaOCArQwggKwMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQU5dHS/vIdVG3fg7ogo/jNBLZU2BswHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wgbsGA1UdEQSBszCBsIIYKi5zY290dGJhbGRpbm9kZXNpZ24u
Y29tghttYWlsLnp1ZC56YmYudGVtcG9yYXJ5LnNpdGWCFnNjb3R0YmFsZGlub2Rl
c2lnbi5jb22CK3d3dy53ZWJzaXRlLWE5NTMzMzJmLnNjb3R0YmFsZGlub2Rlc2ln
bi5jb22CGnd3dy56dWQuemJmLnRlbXBvcmFyeS5zaXRlghZ6dWQuemJmLnRlbXBv
cmFyeS5zaXRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB
9gSB8wDxAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGP2orn
ywAABAMARzBFAiEA8Ty7EcU9pEfxV34gJkHEbljVWQne1B05aD7398HPpuICIArv
sMBFfoh+JtNT7AYx+TZrIPq5iDwM1hF8adhfrGKbAHcAdv+IPwq2+5VRwmHM9Ye6
NLSkzbsp3GhCCp/mZ0xaOnQAAAGP2oroIAAABAMASDBGAiEAltU7649M9j2G6mg7
6MZIo5P7rgipbm4CpnqjLNc/3xkCIQClQBL8Z3wPuf5BSq1Zcm3CwnIYjGRslYvt
ydM0a+UnrjANBgkqhkiG9w0BAQsFAAOCAQEAqRn/SwE6woC/ALo/6ZxbpckyGFv9
QcCstJ6ZYrblyYTkFmleP09bcNKeT+KyQ7T66R7uAkYsMw3FpX0NC2fX/8o+kdTP
fPDrE1eVb5uhNtsbhXjG0cM6DlLOtU3pbq+U2PcamJGyDzpAiljr/ty8s3RNUvDB
WVeEjWLOuGP98g1zX4f7ycdJu1cM8YDmpuc+zRcPDupMOo2tsndMVd24hMgljM2L
usG1RDnZWCz5jhOZ01mPUcXWJk4a6vPOZzuqIDVSsMYv3MPg1k2oJ4/snXHsFbNW
TQSE6j3uxu2tG1WOXyYRSFAPQodH7WtG8lKRpV+btU6phfPPaO59+CMemg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBfJXUoMhybwIggLNO2p
cyMQm6njgBHDYtyB87Hw8vFiDjLPc7jnXBb0RKVSfDGO1dJLfVczczDqRd1tCWrw
7Wqmm59e89o+7jXxErtCb2+9SYKIGgqpS86YYPe3bvt9ZNfkyuBEsBPyhRVKxNfP
dXy3GjV7N7dGE04NH7ds8Skq0J1F+qiFdWMQ7bkrNdOsqyGJFgqUfiV4XSjyu8sf
okXmf+jGaPDQfMfyVTwa3NcbohjDQ9HcM07YsdQXjZa7DpDsxFkYFI38CXtjlv25
h7HiSwqqz/OYEiRe9bj2zyrRALuqQaZ6kZj9kh+GM9v0BX9T0wQIpd+tHt78ady5
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307699708475011175542190623487161829093668
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-02 19:01:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-31 19:01:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.scottbaldinodesign.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25764343812709501626906493082446557925318141887304025735786418262625915718610061569224627795585531963012678382625542511914223909236935646454955585833222472642310041798061224424667285433922519223668074174021523636131775166792417808163400577514123776013812122924663553782800599278275027286792584568507676874292662026787400192089198235810641659898318318333214703622070043860951349459880289694961957920670084050227964115841539597361749792065143838546353199402410394981338928585804808355297846097076305635358398616499590876197590589101776720485910396505832740786003982068490877074164351451045507876415896588778516686616883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5d1d2fef21d546ddf83ba20a3f8cd04b654d81b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scottbaldinodesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zud.zbf.temporary.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottbaldinodesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.website-a953332f.scottbaldinodesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zud.zbf.temporary.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zud.zbf.temporary.site'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fda8ae7cb0000040300473045022100f13cbb11c53da447f1577e202641c46e58d55909ded41d39683ef7f7c1cfa6e202200aefb0c0457e887e26d353ec0631f9366b20fab9883c0cd6117c69d85fac629b00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fda8ae820000004030048304602210096d53beb8f4cf63d86ea683be8c648a393fbae08a96e6e02a67aa32cd73fdf19022100a54012fc677c0fb9fe414aad59726dc2c272188c646c958bedc9d3346be527ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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