www.usa-precision.net

Issued by R3

About this certificate

This digital certificate with serial number 04:4c:af:f2:e1:ce:8b:5c:2e:58:e6:f3:2e:3d:24:ae:18:fb was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.usa-precision.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4c:af:f2:e1:ce:8b:5c:2e:58:e6:f3:2e:3d:24:ae:18:fb
Serial Number (int): 374544479628040727671730022619822502582523
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2e:5e:cb:75:9a:32:6c:f2:a1:94:f0:06:92:64:5a:5c:dd:57:79:ff
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 29:f4:ca:ad:3c:4a:f7:0e:55:b3:40:64:c8:cf:00:be:7a:03:4e:78
Fingerprint (sha256): 02:3f:c4:e7:5b:11:14:5e:44:d8:15:6b:4b:17:12:00:bc:f7:9f:9b:b5:aa:c8:c2:ce:c1:e6:1c:e7:6e:e6:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.usa-precision.net

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.usa-precision.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a1pools.pro
bct.solutions
dragonflylake.us
envisionaerospace.net
getonthe.net
global.market
independentcitizens.us
kauaivacationrental.net
lakelandpublishing.net
mls.news
monthlyincome.net
nelsen.net
takeover.media
unixchad.net
usa-precision.net
www.a1pools.pro
www.bct.solutions
www.dragonflylake.us
www.envisionaerospace.net
www.getonthe.net
www.global.market
www.independentcitizens.us
www.kauaivacationrental.net
www.lakelandpublishing.net
www.mls.news
www.monthlyincome.net
www.nelsen.net
www.takeover.media
www.unixchad.net
www.usa-precision.net

Other certificates including the domain name usa-precision.net

(limited to 100 certificates)
www.usa-precision.net

Certificate

The complete raw certificate details for www.usa-precision.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4HQ2WnZ40sTYEMZtMwE
yPj6D3xLwY8cqm5qMOAIZiQoTaaIBfOt9dv/aS+DlgZSRweWcB9uBTMJOP5UZogJ
kNwr8WKtPPAJp9a6WXzApyIaTNbMJnjTMo6gNXfUVMg8OlDdQCQrLaXxAHAlpo55
GQ1IB4rUralCHB7w3/2BtRxUSNm7vib1eLB2nNLucsP28t8QWGPYbI4J3MP8lRx7
0MBX6iM95n5sJHluDp+Dei/uTDU7HyzxblbmsbBaod+mrStJkmppHbXxvYhwU1XE
6L+u8Vk+YyTOTcHCUarukqReA7twqv4iHF76XB8ZZWV2ftuej6cg51nZ+767Wicm
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374544479628040727671730022619822502582523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 18:33:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 18:33:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.usa-precision.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25690390473558132012763735483440464642133792743982035468364899562241696796029773674235505146388195748016133820275390744342172827204662686897440430306217029504258526999381457882498885889061240057769353450352797993526856361881739078974140351572731200700662194716022654107294824960481782867057071809400788120003376283216720307795103245589251227725384021737777577297450997129818754978490426211280161399654811360503210426923432002321504495069191840257272065857850479369603284375984667784672489050299735927674068340280883153476908525317536810764170017485080473469361043063642473738518393215209821900979262438168824230913613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e5ecb759a326cf2a194f00692645a5cdd5779ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (586 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1pools.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bct.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dragonflylake.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envisionaerospace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getonthe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.market'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independentcitizens.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauaivacationrental.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakelandpublishing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mls.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monthlyincome.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takeover.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unixchad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa-precision.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a1pools.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bct.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dragonflylake.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.envisionaerospace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getonthe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.global.market'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.independentcitizens.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kauaivacationrental.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakelandpublishing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mls.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monthlyincome.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takeover.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unixchad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usa-precision.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001895b0b3362000004030047304502205226e821ec99b2d6c2d0fa5ca6357019bb4c98166b3f4be62702276de50d8ce5022100f70975696d26ce6646685f7a4154195581aebb36a3c7fb2b0be745ea9ad67a75007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001895b0b33890000040300473045022100d4448a922f793f128fcf2dac7d0088a6e02e7169ff08baf4aa7bb737a72553b1022039ec643fe9a494e3dd31d13067e7ab26997d0b335121e3f7b7f8db1452f1f879
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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