www.gemmaro.mydns.jp

Issued by R3

About this certificate

This digital certificate with serial number 03:e6:19:3e:02:3a:34:08:d1:6a:91:0b:77:ad:e6:b0:9c:df was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.gemmaro.mydns.jp

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:19:3e:02:3a:34:08:d1:6a:91:0b:77:ad:e6:b0:9c:df
Serial Number (int): 339635354854572595106571762943629322132703
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:4b:d6:96:3a:b1:5a:57:67:d3:87:f7:55:99:48:a7:78:50:79:93
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fd:e4:83:0a:14:69:30:b5:75:73:52:56:4c:c4:05:36:c7:1a:c1:0e
Fingerprint (sha256): 02:76:e7:1c:7e:3f:b4:b3:8a:39:22:9b:3e:71:4a:a5:e0:f8:f3:16:15:b0:e6:8b:0a:52:02:7f:d0:1e:88:0e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.gemmaro.mydns.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gemmaro.mydns.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gemmaro.mydns.jp

Other certificates including the domain name mydns.jp

(limited to 100 certificates)
support.supermpower.com
axl1944.mydns.jp
nagaw.mydns.jp
takeshi.mydns.jp
www.toshim.mydns.jp
hirop.mydns.jp
gocchan.com
axl1944.mydns.jp
forescout.inflowtechnologies.in
support.supermpower.com
yukkuriikouze.mydns.jp
www.ohata.mydns.jp
vjpug.mydns.jp
*.pcdiary.mydns.jp
la.www.mydns.jp
aco.stoneflower.mydns.jp
webmin.ryo.mydns.jp
myblog.mydns.jp
awa.otei.mydns.jp
www.xmod60.mydns.jp
www.tagosaku.mydns.jp
tsuburin.mydns.jp
proken.mydns.jp
git.jokrlzy.mydns.jp
idea-l.mb.mydns.jp
hirop.mydns.jp
arsenal-of-mad-akashi.mydns.jp
gomidas.mydns.jp
nw.myds.me
bradamante.mydns.jp
support.outforce.com.ph
support.supermpower.com
yoshike.mydns.jp
ns06.tanny2010.mydns.jp
tosc.mydns.jp
lovedoll.mydns.jp
vjpug.mydns.jp
monly.mydns.jp
gal001.chrysolite.mydns.jp
todashuta-sandbox.mydns.jp
tom-konda.mydns.jp
idea-l.mydns.jp
mastodon.karium.mydns.jp
www.toooookai.com
je1sgh.mydns.jp
neko.mydns.jp
axl1944.mydns.jp
oit-unofficial.mydns.jp
myportal.mydns.jp
www.gemmaro.mydns.jp
1or8.mydns.jp
yuya.mydns.jp
alstroemeria.cfbx.jp
support.supermpower.com
www.marushimo.mydns.jp
rrrmyown.mydns.jp
kumataku.mydns.jp
testlive.ayutest.mydns.jp
handson.mydns.jp
skywalk.mydns.jp
office.art-shibayama.mydns.jp
asii.mydns.jp
sato.services.mydns.jp
baoh.mydns.jp
operaciones.adacsc.co
pcsupport-active.jp
chuya-hass.mydns.jp
jk-kserv.duckdns.org
ruined.mydns.jp
qme.mydns.jp
kits.mydns.jp
ntm.mydns.jp
raspberrypi422.mydns.jp
redplanet.mydns.jp
elepark295.mydns.jp
legenda.mydns.jp
hatsyaki.mydns.jp
myblog.mydns.jp
nntt.mydns.jp
ystysk.mydns.jp
greenleaf.mydns.jp
hoshi1100.mydns.jp
www.bisset.mydns.jp
myblog.mydns.jp
bigbird.mydns.jp
sulume.mydns.jp
aco.stoneflower.mydns.jp
axl1944.mydns.jp
myblog.mydns.jp
ginzamsclinic.mydns.jp
gs-kserv.duckdns.org
holy.mydns.jp
2ndwing.mydns.jp
sdf3.mydns.jp
memoria.mydns.jp
kkuma.mydns.jp
qwert.mydns.jp
kiri.mydns.jp
daichukkk.mydns.jp
myblog.mydns.jp

Certificate

The complete raw certificate details for www.gemmaro.mydns.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTFy0dfKzjsP8d5ssvBG
kfqmcACs1UOlD77LymEyhsI6kFWw8pMdofjiqmFdIIeATUL7bIZjP/HUb/zbFawP
zUFHSa5uTKnVm7rAL1GPT8bCLnlQDerZ5+yA15oncPmoU3/S8gWgN1MvcaB2Ckny
S6d8klpBhiIQqcP6PJ/poT0klr+qgXgW+GyL0wTtRfWLJfJuxYJxyVaPZhKO5FVQ
NWzgmNqeIu8Boswk30ZQm7aWcRqd7+fK7Et+CGcLxSxrGnY55JSJkK0KxFEx6BDy
vahGlT3iIWFl9S46C+f0LafGL18SPTft60NVfpKtq8lGyGuLhhm+u5u6oMCKmeq0
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339635354854572595106571762943629322132703
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 23:21:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 23:21:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gemmaro.mydns.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21358657510541829379654103687249407238256821345124753928037381865146980762278008832462173650276295009694760370220863513666110574468564074628707432508597236189531001411969462720427865186656438370523721441225492016405035054602619547673242458263472019209440966143318605817327992735336494157567094235809417359745187563511144508743039677893265528504549310478773579890165079928164132125231084085025821230272453872093323716419409721374758970539685281540154328749317328095367069161369736602525300817537288387183184579489680470336548567775746867664769767472496630624929163123898199680262200232370385260007760825975913793106973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d64bd6963ab15a5767d387f7559948a778507993
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemmaro.mydns.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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