89261a.com
Issued by R3
About this certificate
This digital certificate with serial number 03:88:8e:0c:61:09:72:a2:d2:e5:62:71:4d:db:79:48:d4:6a was issued on by Let's Encrypt.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=89261a.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:88:8e:0c:61:09:72:a2:d2:e5:62:71:4d:db:79:48:d4:6aSerial Number (int): 307804074347634394592645708487818515895402
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 97:71:6e:28:5f:88:eb:1e:69:38:c0:e1:db:ef:c0:4f:08:6a:f3:b9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): fe:0f:ba:2c:8c:85:76:6b:88:63:50:04:54:b2:70:29:ab:43:f7:9b
Fingerprint (sha256): 07:ba:9e:98:23:7e:09:9c:42:12:a1:9a:63:44:6d:22:5d:33:0e:c2:82:35:7a:17:7a:22:1c:9c:53:98:5a:88
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate 89261a.com
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 89261a.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
89261.com
89261a.com
89261b.com
89261c.com
www.89261.com
www.89261a.com
www.89261b.com
www.89261c.com
www.www89261.com
www89261.com
89261a.com
89261b.com
89261c.com
www.89261.com
www.89261a.com
www.89261b.com
www.89261c.com
www.www89261.com
www89261.com
Other certificates including the domain name 89261a.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for 89261a.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISA4iODGEJcqLS5WJxTdt5SNRqMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMDgxNTIxMTdaFw0yNDA1MDgxNTIxMTZaMBUxEzARBgNVBAMT Cjg5MjYxYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjVOa8 9wqE2M6EVNT+6R8lXBIYANEiBY8zfBOPjV5kOv+EAWJYACM1UDZo6OEBi7CGy0t4 UIWE73yaCqmXVD2GSdfhmyCUytV4a8sVF6a6/X+IOWMxKUX2eq5+L+/A+oZfPQ0B X4/gKQwnguGB20b67H6tCFzj9uSDYTXWVMv/ob0pofRDM8Xkt/8zpjIFfpVmM8vC 0Djm4wwotibPqYlQlS4rJVrLGdCx9QGo/zDxuXd6ogVbqudkRaC1HkSe4dhzwn2b 8j+N2Y1Yw7LyzIUKDz+WSGbGtTcJUrAu7ZUE6MoaD+BuzC6ETg9Ld3QfnE8CVa8B mJX2gbFoDLHS5GOtAgMBAAGjggKPMIICizAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FJdxbihfiOseaTjA4dvvwE8IavO5MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIGZ BgNVHREEgZEwgY6CCTg5MjYxLmNvbYIKODkyNjFhLmNvbYIKODkyNjFiLmNvbYIK ODkyNjFjLmNvbYINd3d3Ljg5MjYxLmNvbYIOd3d3Ljg5MjYxYS5jb22CDnd3dy44 OTI2MWIuY29tgg53d3cuODkyNjFjLmNvbYIQd3d3Lnd3dzg5MjYxLmNvbYIMd3d3 ODkyNjEuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAgYKKwYBBAHWeQIEAgSB 8wSB8ADuAHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGNiYYC 4QAABAMARjBEAiAITW7yoCcipsU8SklwZUiPWtcAycRJSxgnqutbEnkv2wIgO7TQ bGagFfblhZwZY+AN8Boe3+1836w1JngiBIT3iX0AdQB2/4g/Crb7lVHCYcz1h7o0 tKTNuyncaEIKn+ZnTFo6dAAAAY2JhgO4AAAEAwBGMEQCIDNbE3iSXWfW4eQpaPnu SsQPwX8Uk2Ou73VcZm0dXDYbAiB/XLU9Si+8XhmG3svcJi6dkavOsxE/KprGuSg7 dWuDRjANBgkqhkiG9w0BAQsFAAOCAQEAV+RcFBlEqaa7ycHqSMe6q23WS7A4h7ol MJnYrI37kveh3sJTFPigZBPbUKUPMVJIBdu9Ean8+aTq3znWIYQpvukaCx3nyWMn Tmtzw/ryW74bybqzq1MILjAj2D6W1ZDDKoyoPRIwze9B/CEjZpuUu+/n+bwanyJv PPr27holzuPp2AUYWoNwM4fEpnig6ggRVXiOm/e/lzBxIgayKe0aI10l9sIsns7f vJyXgiUDCbbE9nEOFA9v68/inaB0Lghss2Z5bPfb91oVx+zZQNdGyEPq/yZ5i/C4 brDzEPqujHlPFQXDwvn+qyJpp/SSnyQiLDn1Xw4kkaDK9TwYeJLLuQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1TmvPcKhNjOhFTU/ukf JVwSGADRIgWPM3wTj41eZDr/hAFiWAAjNVA2aOjhAYuwhstLeFCFhO98mgqpl1Q9 hknX4ZsglMrVeGvLFRemuv1/iDljMSlF9nqufi/vwPqGXz0NAV+P4CkMJ4LhgdtG +ux+rQhc4/bkg2E11lTL/6G9KaH0QzPF5Lf/M6YyBX6VZjPLwtA45uMMKLYmz6mJ UJUuKyVayxnQsfUBqP8w8bl3eqIFW6rnZEWgtR5EnuHYc8J9m/I/jdmNWMOy8syF Cg8/lkhmxrU3CVKwLu2VBOjKGg/gbswuhE4PS3d0H5xPAlWvAZiV9oGxaAyx0uRj rQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 307804074347634394592645708487818515895402 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 15:21:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 15:21:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '89261a.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20618710111174233619820436487494004332131687100803405752149574364160286149093611099819279545341239175919024082828198059983530011718117244907256154533895102895339808210019297562671838802300802978278013572862897359960291228838328418703635373998708071198220459538944832683686204077568037048057089931907316277818142674281511602197600341706316693368207604520290170841417053354442092818475394938291463687790862458020663622716868679774205176470149841399913047761187138280453168796782993029344954825493437344312640999549568390550680026940070904814795031890502973173427295586541816573519696794109034929614093729974208197583789 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 97716e285f88eb1e6938c0e1dbefc04f086af3b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '89261.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '89261a.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '89261b.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '89261c.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.89261.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.89261a.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.89261b.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.89261c.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.www89261.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www89261.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d898602e100000403004630440220084d6ef2a02722a6c53c4a497065488f5ad700c9c4494b1827aaeb5b12792fdb02203bb4d06c66a015f6e5859c1963e00df01a1edfed7cdfac352678220484f7897d00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d898603b800000403004630440220335b1378925d67d6e1e42968f9ee4ac40fc17f149363aeef755c666d1d5c361b02207f5cb53d4a2fbc5e1986decbdc262e9d91abceb3113f2a9ac6b9283b756b8346 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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