pemangsa.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5e:f3:48:86:8b:56:33:fe:2b:67:8b:2f:99:ee:33:89:e6 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pemangsa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:5e:f3:48:86:8b:56:33:fe:2b:67:8b:2f:99:ee:33:89:e6
Serial Number (int): 293646779263080784615283564427605785676262
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ee:9a:25:09:63:06:cf:e5:e0:b4:e9:4c:11:96:50:9f:22:d9:9e:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c8:87:b1:4b:88:9b:b7:6e:5f:70:8c:1c:3b:ac:35:88:0e:e4:27:86
Fingerprint (sha256): 09:50:cb:99:f5:5b:b3:1d:9f:a2:2c:8a:d5:06:d1:a6:54:55:81:6d:da:e5:26:1c:69:cb:4e:fb:5a:07:4d:1c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pemangsa.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pemangsa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auburnsportsmed.com
caremagnet.ai
coim.one
drai.ca
equalifetraining.org
flagstickpic.com
havit.forsale
pemangsa.com
pheromoneinsectspray.org
productreviews.online
sanfranciscostemcellclinic.com
waffen24.com
www.auburnsportsmed.com
www.caremagnet.ai
www.coim.one
www.drai.ca
www.equalifetraining.org
www.flagstickpic.com
www.havit.forsale
www.pemangsa.com
www.pheromoneinsectspray.org
www.productreviews.online
www.sanfranciscostemcellclinic.com
www.waffen24.com
www.xn--5db1b.com
www.xn--cebd.com
www.xn--vermgenaufbauen-ctb.com
xn--5db1b.com
xn--cebd.com
xn--vermgenaufbauen-ctb.com

Other certificates including the domain name pemangsa.com

(limited to 100 certificates)
pemangsa.com
goldcareclinics.org

Certificate

The complete raw certificate details for pemangsa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3F+rp0wGSorXMtdJdPsM
9it1mIfWAppKPzLqV+qZHnwIjHoLB6VX4zaTUjlvFryoHz0o32Irq5ORf9pvVsWm
o8T2alVPT6aKccDBvsRw1qfy9bDxTw79PBYk9tex+aeFbENuUGvVoV3VK6CX63bl
b3jvy/lwKHwrIFZUyO09C+AIkHe9KrpIuNSZX2yAzs7gGY0gX49yzap1EL1gxNf0
54vBKLtlLTHOjlKVFRs/6DpptMpFvxhzMDPHmM1PwtO6NzsR6PpDOFUqtkcn90Vx
MT/VKqW+2R1qBj1b9rHt0SJCsIMzzT5IgrvkZhwVBuv6V13tgNvp+lSPiniZbUMT
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293646779263080784615283564427605785676262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 00:52:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 00:52:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pemangsa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27819603984991009278723577948113651969500546762510212220390927445597533718530333507101586704884397059568859457999093623529771552181244165648877396298675108893420727301624088860561007030529299930316589478979039482273036124350450422402508978575240656715523792468914069900781474495618283855142416612707791601142321714522321539048743602746759421577765615493439905956276175576043486719345265657048980900482319361189792417999149578658114939013700743869650986525592852981725738996680970634850044558843841896663695387535782035759830743541281281335969102152450125867203028355203176154035741810326401361016414341394451442897799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee9a25096306cfe5e0b4e94c1196509f22d99e7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (618 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auburnsportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caremagnet.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coim.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drai.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equalifetraining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flagstickpic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havit.forsale'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pemangsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pheromoneinsectspray.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productreviews.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanfranciscostemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waffen24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auburnsportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caremagnet.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coim.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drai.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalifetraining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flagstickpic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havit.forsale'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pemangsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pheromoneinsectspray.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.productreviews.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanfranciscostemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waffen24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--5db1b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--cebd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--vermgenaufbauen-ctb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--5db1b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--cebd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--vermgenaufbauen-ctb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f74ccc6c10000040300483046022100c1e2dcedc0f7bd4a07f7fe160030eba5fc8969eaf661125c5e6b2a5eba546ad0022100cdcace4628b4c14a478c4e41bd1fd298496044a0465c1d33acff68e2a47b63a80076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f74ccc6d500000403004730450221008f3c961683292e8f018228b6b106fc75fe4ba1e6adb16f7b167a4510e2f1c791022072d984aaca9d623f2d301fbdd0aa04b01df8c23856480a9d75aa3387326b6dd5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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