www.heartgift.net

Issued by R3

About this certificate

This digital certificate with serial number 03:1e:08:85:e9:b3:a4:24:5f:2e:15:c8:36:db:ce:84:e4:f5 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.heartgift.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1e:08:85:e9:b3:a4:24:5f:2e:15:c8:36:db:ce:84:e4:f5
Serial Number (int): 271556657942391436556138429334714895885557
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:70:10:90:9d:f0:ab:92:24:16:88:7d:be:a0:a2:36:cf:40:80:0d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 83:43:a3:f9:21:d4:6e:2a:db:1d:89:17:7c:83:f5:0f:db:1b:c7:4d
Fingerprint (sha256): 06:09:17:42:e3:73:42:96:43:93:c1:74:66:c2:38:2a:65:83:3b:6c:13:ea:64:1b:13:2c:e8:b8:5d:c8:1a:54

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.heartgift.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.heartgift.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

heartgift.net
www.heartgift.net

Other certificates including the domain name heartgift.net

(limited to 100 certificates)
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
test.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
test.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net

Certificate

The complete raw certificate details for www.heartgift.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27pV0JpqnrPQyv/Q6GIt
w2rRsKs4xHMyAUQp1HGsr356nMJJBIIbYsh7azcffR808++VXB02vLNSJ/EG5ZLP
+2LxihiWZVpYBVzixeJ6W6563uKNn7OwKNMfQCvPKKyHhAW5NhX6JctdcQ1/tPms
YjXbCgyyM1oIIjNlqEWCVimQY/C3EehH7QKhNEiDPIrDi5BRUtDvORv0Ed4yQVIq
XRuwuKKHG12qzhroC6Qz1rO42r8LxSVdvztWBfLiR2TGMdyDjMn6Fyedew9MaW5c
GvIBNwO5ScmciD80sjhNgnea7l3+9kADpJ1tGzoZGEKifblDOq2PysNtuQUvP1ai
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271556657942391436556138429334714895885557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-24 23:24:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 23:24:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.heartgift.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27738074106342053759374819176871251219978159666127896569289313095183256867675868731026564630573791194031812698139899929156584366391862024509339087352875351964610085321211034632117832873238317653025013620777612996456179780082858538740865860354436590131325798618765824802113915443058818791986415095948395120953907566792200473861433632254994034835272040738053978169302824029920460530179115003846851721732563132973608179887065411664329034978936308903566831601061936400132249195089009116293823292316876968763466285409192649493033395696686589064255865387806653605775100087169685783398369397821836527599292336352027689263769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d97010909df0ab922416887dbea0a236cf40800d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartgift.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartgift.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a2a144dad0000040300483046022100d0f9d3cda1f6c811e9f33df1e64890570442225cb0b0381560265b2085852ffc022100926412eaac54b9fc83ea858ac61b4c6b32d9005a62be57f3b46ae95c9bfac154007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a2a144df3000004030047304502200b86f6508af7d6ae0cdf86079f6903c6e58e1247e197080154e083dedceb9daa02210081e8db4bece04043a44998d3092cb768375e8ebb53b35c64029f4ab8b6f5b6e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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