dpgmedia.com
Issued by R3
About this certificate
This digital certificate with serial number 03:3c:37:cc:c1:3f:b1:d2:0d:dc:84:7f:1a:bc:6c:71:1c:8b was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dpgmedia.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:3c:37:cc:c1:3f:b1:d2:0d:dc:84:7f:1a:bc:6c:71:1c:8bSerial Number (int): 281827970498415819755310242155227513953419
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ab:b8:e1:e9:d6:b7:49:5d:ae:2f:63:a8:fa:09:41:cb:3d:17:41:8b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): aa:b1:cb:84:0f:f6:e0:15:2f:9d:cc:47:3f:64:6d:ff:42:bb:ba:72
Fingerprint (sha256): 03:5d:05:18:b7:ad:c4:d5:8b:ee:3a:8c:4b:d2:12:16:43:bb:57:b1:44:6c:dc:39:f1:a8:3f:66:c8:55:a2:b8
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate dpgmedia.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dpgmedia.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bondermusic.com
dpgmedia.com
thenewjerseyassembly.org.arbitragex.de.incubatortranche.com
twitter.xcptoken.com
www.patricia.io.certifiedinvestmentadvisor.com
dpgmedia.com
thenewjerseyassembly.org.arbitragex.de.incubatortranche.com
twitter.xcptoken.com
www.patricia.io.certifiedinvestmentadvisor.com
Other certificates including the domain name dpgmedia.com
(limited to 100 certificates)
dpgmedia.com
sd.cosfacts.org
dpgmedia.com
dpgmedia.com
www.ecoartsamazonia.com
www.charlottecorelli.com.4irreserve.com.watermarkfarm.org
dpgmedia.com
feedquick.com.halloween.cool
reviewsfi.com.bentheimchurch.org
getabetterjob.ca
www.dpgmedia.com
dpgmedia.com
dpgmedia.com
dpgmedia.com
dpgmedia.com
metaui.tech
dpgmedia.com
gopsa.com
www.weekday.vc
immoloca.com
dpgmedia.com
bibletheologyministries.com.cadega.com
dpgmedia.com
dpgmedia.com
foreverdee.co.uk.proudarvada.com
gopsa.com
www.weekday.vc
meta-corce.space
dpgmedia.com
www.all-consult.com
dpgmedia.com
dpgmedia.com
dpgmedia.com
rehling.family.catholicyouth.bible
www.ecoartsamazonia.com
www.dpgmedia.com
sd.cosfacts.org
dpgmedia.com
dpgmedia.com
www.ecoartsamazonia.com
www.charlottecorelli.com.4irreserve.com.watermarkfarm.org
dpgmedia.com
feedquick.com.halloween.cool
reviewsfi.com.bentheimchurch.org
getabetterjob.ca
www.dpgmedia.com
dpgmedia.com
dpgmedia.com
dpgmedia.com
dpgmedia.com
metaui.tech
dpgmedia.com
gopsa.com
www.weekday.vc
immoloca.com
dpgmedia.com
bibletheologyministries.com.cadega.com
dpgmedia.com
dpgmedia.com
foreverdee.co.uk.proudarvada.com
gopsa.com
www.weekday.vc
meta-corce.space
dpgmedia.com
www.all-consult.com
dpgmedia.com
dpgmedia.com
dpgmedia.com
rehling.family.catholicyouth.bible
www.ecoartsamazonia.com
www.dpgmedia.com
Certificate
The complete raw certificate details for dpgmedia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAzw3zME/sdIN3IR/GrxscRyLMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA1MDMyMTI2MDNaFw0yMzA4MDEyMTI2MDJaMBcxFTATBgNVBAMT DGRwZ21lZGlhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANUk +I2FrG3WQRgE1M9tC/yo9bhG6pFS7zR96iM/Po2rhEfEvf2LnBca2hgikxrLMP88 3LecTummuxuXtQSFA1TqD1SV0MVkmFr0epBNcXTPVNfyQkBRRhZJFrBJHHoeL1Il zb5FwoanLV29G62gtho5oUqlisPpAGtMlHgUTc7YbPgwp8GMkm04cI1JgbziWG6o GgKgj9COAjwlRrqAN8JWFSgfneeN4hoaJ1TiTg98GjKKrl+74JHw+hZO74vGNw0Z JWQABP9fd3utk+vzCOI1vHh/GpwJwz8bSBvg2IBXcFOJgfjQN4dxWVJqOprZAkqu 6Zp4POoewS4VOaLgrkcCAwEAAaOCAt4wggLaMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUq7jh6da3SV2uL2Oo+glByz0XQYswHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w ga0GA1UdEQSBpTCBooIPYm9uZGVybXVzaWMuY29tggxkcGdtZWRpYS5jb22CO3Ro ZW5ld2plcnNleWFzc2VtYmx5Lm9yZy5hcmJpdHJhZ2V4LmRlLmluY3ViYXRvcnRy YW5jaGUuY29tghR0d2l0dGVyLnhjcHRva2VuLmNvbYIud3d3LnBhdHJpY2lhLmlv LmNlcnRpZmllZGludmVzdG1lbnRhZHZpc29yLmNvbTBMBgNVHSAERTBDMAgGBmeB DAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxl dHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ALc++yTfnE26 dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABh+O4+eEAAAQDAEcwRQIhAJPpwbDR 7wXFpTMUXWJ1T8+AOj6FIE/4EGIoOKdm1DB6AiBUA/owmHgwmR1/2murLe2FtycO ArSxyY4VIELb556hKwB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutS AAABh+O4+hUAAAQDAEcwRQIhAOAYCIbwZrnFazNmRHxSRk0tyUHjE2CNSaq2dlU4 lY4rAiADIUU12ObdCFkzRtF5CoubXIe5hHvJuoLbdU5Ags/APzANBgkqhkiG9w0B AQsFAAOCAQEAMnqAbV2SCMAJTCuKumWdRQP+6M67yOPjNakPMXV8KLotXUF392Iv h6WYxY+Qw5TUepGS7kF466alpL1BVvIBdsjaVUgPqT3iKa6wKsudPLK5FCjpQUH4 3jLXm/QdxmNYYeBERKlcI+PQlQ4X42OfsISK1Vt7ZND5AI2PprJ5N4YruXkzjE3f 46/NlJGOYbK/3lKpdi4c1lMEye+hicekduLuGHXiE9STGySQywcgjQrZirMs37Jz aZr6P0+FLhvo09DL21l9rCj2IdGPie5qatsMvK7vi1sIJGyvPo/qqxKELJ7eRs/S 1JPmh8MhstDaqJMBz0mAqB9V4XUPiJsyww== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ST4jYWsbdZBGATUz20L /Kj1uEbqkVLvNH3qIz8+jauER8S9/YucFxraGCKTGssw/zzct5xO6aa7G5e1BIUD VOoPVJXQxWSYWvR6kE1xdM9U1/JCQFFGFkkWsEkceh4vUiXNvkXChqctXb0braC2 GjmhSqWKw+kAa0yUeBRNzths+DCnwYySbThwjUmBvOJYbqgaAqCP0I4CPCVGuoA3 wlYVKB+d543iGhonVOJOD3waMoquX7vgkfD6Fk7vi8Y3DRklZAAE/193e62T6/MI 4jW8eH8anAnDPxtIG+DYgFdwU4mB+NA3h3FZUmo6mtkCSq7pmng86h7BLhU5ouCu RwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 281827970498415819755310242155227513953419 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-03 21:26:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 21:26:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dpgmedia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26906989992703622787638341700461274793606884886725771403159030042778644472288667074299047223235756622067909681686914817403799265215046840965671264362247064314520345226038977657152538041264339118918677608929067517162700833575336869445654820489106368257520653568496156332066775090375681676614087287029206671643582650051743718153232623406003865996177404735808597424245680919318072334391589811448869646510018623580592019274659325202118641987203738890128504406037516678662880798805550579204389406254248616068397122814701355667885119536892633927313696807743897410408388401142074101879580056328749379697915279794154476973639 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) abb8e1e9d6b7495dae2f63a8fa0941cb3d17418b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bondermusic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpgmedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenewjerseyassembly.org.arbitragex.de.incubatortranche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitter.xcptoken.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patricia.io.certifiedinvestmentadvisor.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187e3b8f9e1000004030047304502210093e9c1b0d1ef05c5a533145d62754fcf803a3e85204ff810622838a766d4307a02205403fa30987830991d7fda6bab2ded85b7270e02b4b1c98e152042dbe79ea12b0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187e3b8fa150000040300473045022100e0180886f066b9c56b3366447c52464d2dc941e313608d49aab6765538958e2b022003214535d8e6dd08593346d1790a8b9b5c87b9847bc9ba82db754e4082cfc03f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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