1k94.com

Issued by R3

About this certificate

This digital certificate with serial number 03:51:8a:a4:1f:9f:bd:06:c5:4a:03:05:97:c1:d9:b0:6a:76 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=1k94.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:51:8a:a4:1f:9f:bd:06:c5:4a:03:05:97:c1:d9:b0:6a:76
Serial Number (int): 289084015157390349987649284744580648954486
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1c:f8:8e:b8:ff:c5:60:88:eb:e4:61:8f:7f:f2:ed:b3:83:04:fe:c3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f8:19:a8:a7:0f:41:8a:a7:b7:f9:66:16:9a:e0:c6:96:66:3a:cf:15
Fingerprint (sha256): 04:29:be:67:a4:fb:53:f2:d5:ea:a7:c2:a0:51:91:bd:92:8c:8c:a2:d7:d8:a6:ab:92:6e:12:45:e1:f8:55:ee

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 1k94.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 1k94.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1j80.com
*.1k94.com
*.1m06.com
*.1q58.com
*.1x79.com
*.5t39.com
*.7j7t.com
1j80.com
1k94.com
1m06.com
1q58.com
1x79.com
5t39.com
7j7t.com
www.1j80.7j7t.com
www.1k94.7j7t.com
www.1m06.7j7t.com
www.1q58.7j7t.com
www.1x79.7j7t.com
www.2a57.7j7t.com
www.2t84.7j7t.com
www.5t39.7j7t.com
www.5t41.7j7t.com

Other certificates including the domain name 1k94.com

(limited to 100 certificates)
1k94.com
1k94.com
1k94.com
1k94.com
1k94.com
1k94.com
1k94.com
www.5t47.7j7t.com
1k94.com
1k94.com
1k94.com
1k94.com
1k94.com
1k94.com
www.5t43.7j7t.com

Certificate

The complete raw certificate details for 1k94.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApanjZ90sl8Y99v6r0AbB
ZWA5KS/lE0mHECxbMEBV+wohtVlcCgICNTC4rECsfS72YDYxbRfGGxTpBrqhK1Zc
vI5XCu9ADTa0+MUdjN8OjpWJnLplIe1WGiXiIX7eWGf4zWxfZJLlBpPhNBM8CcHl
BhbkKDwB0uN85h7osPlEXuFc20R+OlW6e9XgNCuqIp/6Lyj6+tBzXspkFkA5RxuL
FJ2RatgByT9M63adyssfBRkxSS08BuPKC82tmI5B8iHUQj+3RZXJ4Xuf9Xjc4JA+
IiCI09siIMrHYFDkOm2s4J/BQTy7beQrlRFTFieiABe8CIpk7KxIgrcQyBPhyC9O
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289084015157390349987649284744580648954486
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 09:14:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 09:14:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1k94.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20913095364237735018031300676312079543734139683079650868513295004867191712289835068240143077365650604564086036612071102324428972304421025158715615860356224049610416566270222780026224015577914233693860635144538386744591935146153710987959278775053658814855968442005998283728467907735863153525536704472633143480757956472304712910263202505633539554833402281419948817093945276017046215227526730865257240273341933248383285028475602102755680466837566590540393567352233237165394866183035890411153408374385025666749424120495045332606206638809901259772459401969022489601217561218121007019584948982289186017866336906852694969961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1cf88eb8ffc56088ebe4618f7ff2edb38304fec3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (329 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1j80.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1k94.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1m06.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1q58.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1x79.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5t39.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.7j7t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1j80.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1k94.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1m06.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1q58.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1x79.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5t39.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7j7t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1j80.7j7t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1k94.7j7t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1m06.7j7t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1q58.7j7t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1x79.7j7t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2a57.7j7t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2t84.7j7t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5t39.7j7t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5t41.7j7t.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bec396f480000040300473045022100d3fcbb68ce97030f92e92e9766f3d674f69ed59e59a9a88dfd1b744bc298ea60022059ee3591cb7ea7e43e55ce900ac57da3ff60bd9771a00c193ab8bd96806bf3d300750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bec396f9200000403004630440220359710748590def80d7ca238b54f352aa29887ac0994dcce7692387eabe846f0022001fd0d1573b15953b413de7d0366cf202362007dc883cf12f8b79bb0fcb2601c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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