www.ldcequipment.com.au

Issued by R3

About this certificate

This digital certificate with serial number 04:69:b5:2a:57:44:5f:13:4a:25:9c:19:ef:29:d3:85:82:37 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.ldcequipment.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:69:b5:2a:57:44:5f:13:4a:25:9c:19:ef:29:d3:85:82:37
Serial Number (int): 384419602367431228450243718996066159657527
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 52:18:13:9d:d0:b6:a9:99:e9:ab:7b:4f:17:13:c7:2b:18:99:33:7a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a3:c9:78:1a:86:65:54:49:82:89:61:a4:e0:2a:02:45:73:94:12:45
Fingerprint (sha256): 02:ca:68:44:20:5d:af:d3:5f:a6:f9:f5:ef:f1:b0:a3:1a:7e:23:23:ad:5a:f1:6d:eb:68:ab:18:f3:6a:d0:87

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.ldcequipment.com.au

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ldcequipment.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ldcequipment.com.au
ldcequipment.o.thrivex.io
www.ldcequipment.com.au
www.ldcequipment.o.thrivex.io

Other certificates including the domain name ldcequipment.com.au

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ldcequipment.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWGJHFctUAtVv9TTb8Zv
1jdqx1C1WPtORUBcDvkU3tAPLfVxDZqUToWCOCPfyxuPVx1GtX5izSSL/E0tMhUI
aYrXSHXq7fuwaASAZUWGTYaMNEKoZ5SKL7XsSoeyiVrS2Vn5sUdFjz+cOrf4hYIT
EnPbjNAFpjbOyPWYQ3HrkrFvlV/JbSqi2qXYYl+TDTT+AXSg3uxJcRV1dbon+s03
Tiv3fbLxPWNfX6RDHYP343yqrr1qYsm/sbydgLkF1EgG2bwY89pUTX0Y6UBU4X4C
gP+3d5pgEZ1aAcFTr4UNw6goypQOkjMpUeMng+mVuRjXKrQG2xGFlzUM4ZhU3197
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384419602367431228450243718996066159657527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 18:24:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 18:24:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ldcequipment.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23907136229953736112501583072390650874781207004312119281869382472167610970514808231047328585140488759499287092680763410058511798597136565824540359867217272221369567260793436274923307700122204908261736468149177614173963810028427466596739375108079330448301641535437752195173514182211550689298140846071188136825853936211995687197699724410696085764569007704002051722305020865773971914864481228420778204587752678334506016655832156982825646104175584150791144032777456636366754503242206050289803108677025010766407918920699067999441615960201810198918235786055590170466303480057223040750313711694960302276027369468844052544267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5218139dd0b6a999e9ab7b4f1713c72b1899337a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldcequipment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldcequipment.o.thrivex.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ldcequipment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ldcequipment.o.thrivex.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cd5eef7e30000040300483046022100c4e13ad969f30050d441bc8dbe39bca0db829541d7a082e559049e9c6b791939022100cfee2323c81ef67fe929b5e56ad758ebe9208aaf08084cb263d89410d57db45e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cd5eef7ed000004030047304502204a30126a513e68fd4bc82698b03bec001c30162a92c01fad5551fb8fe78ff399022100c408b7ead39b1d3e96a75f13f3d9de8a924ade828924f8fa558de6926fc95f42
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004861adf33b84dc7a46d27c005e02934ca621138bc2689207360248bc2239a1331a5c12eed1730801b185588f4785d075031d188699323db410770a37f9716d6883c2bae9eebcc0a8fe5fe565d2caf5b998ab6f1460bf58ad3bf69f0708a30b5667e797b851e52c8d9844f2064a8861e426c52fe1100ae7bcd910fb13a9c7d7ff9a7b40f144c3864eed4b7b83c572a430b09163bf8cd848b28f98f42f047e01b7d505168335f5a519d495d320c021f0b60d51128bbdb7d04d5462cfda7d8ddd4b514cd8d2abd780c16d6f1603f40c7e3224f9163327dac3f8c7634d081c75b5903131a27f0e40c032117e960d522c4b881a9f839a6186c977a1eda60e23015370