conforme.com

Issued by R3

About this certificate

This digital certificate with serial number 04:1e:2c:01:91:05:cc:cd:98:2d:93:31:44:55:af:32:78:44 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=conforme.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1e:2c:01:91:05:cc:cd:98:2d:93:31:44:55:af:32:78:44
Serial Number (int): 358716108900189452156132756040787424344132
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 96:d6:e3:33:4d:8f:16:50:91:ac:ad:41:7f:05:c1:76:07:48:34:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:d9:e8:31:cc:9f:29:2a:b4:6d:e6:81:d4:5f:0e:22:ad:77:82:6e
Fingerprint (sha256): 09:67:f0:51:9e:f9:16:de:20:07:d0:90:97:ad:b5:5c:05:f4:09:d2:5d:b3:eb:1b:c4:5e:0d:77:09:87:4f:ea

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate conforme.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for conforme.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

conforme.com

Other certificates including the domain name conforme.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for conforme.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgISBB4sAZEFzM2YLZMxRFWvMnhEMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTkxNzI5NDhaFw0yNDA2MTcxNzI5NDdaMBcxFTATBgNVBAMT
DGNvbmZvcm1lLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMg4
E+9KRrbKRj4aHEStY8bGYcAxiqJ5eYyOnkce1RNpSGIn2YHTvS/hvLWj/aMu13Bp
hKx/U64XmGhxQUoWD4b6mQlfc49MnGDrkCamd7tJWa5VbBb7ngO/4934emistSiq
PMgNdOuGH0Z3h8r4VRz2zw5+v9zBEur1XZ7iE9RQaEvIrt5vlcsEzd29IE7ZNpNN
VNyNDRF0u5JLw0LYntB+PvkQ1py8VXKBb7niQaJMcDMXK3QUJdd8TsRehig9eNGE
9LHOTOKTXDa+V/HAnYG9nSF43V24aAipYArxnnveLn4M8OkWXQUa6/3PVl1ElewO
ipa/95Z3qo43DRYiVzHOR4/rDKP3IXNJGjVz/B/eqq8IaXn6VLBD104BhT1yVMfB
o8IpHbISubd41PP4vZ7+buS5Zo9l7MgD8Ky9+DgzmYcdaerv+dVyUQp6Ez2QHwe8
Lp3hfG0BraPmBqCUv9RXcfCnHIIMM/Y/+VYO7wdZHxgZkjU7iudXMfU7ZLya1X9j
uHATSc9wf7u2uZxuhKcmCuGrA4SZNzw2i2MLtoPBf8iBl1+SF6WaWv/QRE3OPnPl
c//NSy1/SacF1poTYXTN+kosRl2F9Kr5H8vs8M6qsRLXiDciwIV33JaO1ViugxIy
91nqH7ruW6qyVzsRuTeKQWkkDIwv67Pd7YWd8p+5AgMBAAGjggIOMIICCjAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFJbW4zNNjxZQkaytQX8FwXYHSDQUMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMBcGA1UdEQQQMA6CDGNvbmZvcm1lLmNvbTATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEiw42vapkc0
D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjlf6DKcAAAQDAEcwRQIhAMmaBNdQ
XTd3Qiri6sQ2HhYqIGbtBqHwNkDBvq0iPf9zAiBaH+znVCkzxC0DtlFHtTtib6qH
GAofz7GTaHhrle74fgB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7Wb
AAABjlf6DLkAAAQDAEcwRQIhALvR/EAsAqQMvHtIFsl3n9RL63ZLYaRxlidTpiZw
jdjqAiAbg4OB0NV7TEG/pO3PEylfuORYmDT1MFs2J2bKP/ilpzANBgkqhkiG9w0B
AQsFAAOCAQEABZpMmxuQqc5t/5rm/GdMWyNN4uWacfkzJC0qO5G3abUCT0UCgsWy
QgcI63oa3lIKp3ddVQNDS11OYxrZatlAb1bRWlCqFvRjiQAyYpO7Ppo3uVDXeODX
O6QqkVgZ/SPcTJX4Xkomjs/u2NpbmY8WynMg5x5Rq9UxMgLudVPNjyuvL2wT+GHh
4WG5qGe1Z30uTKelVvnI53ofkyME9WIQ85LvVyfwY3EymTATdO9hOzW3IJ+GWseN
PGcI5D67KSMNUCeyuJQCUfd0zqbmb8o/p9cTON+m8i2JDhN57NfcoMh+VZhM/Btr
xCbTz6cKDO1Nl1cMGgc8aNIXCBqocvIp9w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358716108900189452156132756040787424344132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 17:29:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 17:29:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'conforme.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816822476689205449130740616759499057848735759373061190429459014481703063932065286432220193335054375821928130874865249126484275776818958900517539293293364535369712542304599095505941742732572841039460511914691835789537608599445910902856641837440919346779427620052451483660280538146497263565385270961457972109653083250677836825172515899377166313015860467889755268814766935501955389290759389248474571520366761517763846658973429948597171189429585221768035600108432962214928815117265915277413531883861907148379352788145106915427722859579834540133872314225700229922205128870580235538899560533984173462772126994989822347273306083143225121155362754799130977805333360605970825609791100905957179476008796100335802537186890781902147279082580739452586794487382274231576666646354526329680192365342361335475641525070739482725293331135869944571372151592536963366404924565302112762096301497704013947836344697825126562625484937291411822372630506460577202706929595472149117390771474258736965613025202207167256143845156998727702608174734852262218285697953766001905208242890422936146156469953041397234708235523062243581127852669645497065265453239260399301882522314137917854775037090208744418691859125934380497258460543657755963594081688966729274735370169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96d6e3334d8f165091acad417f05c17607483414
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conforme.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e57fa0ca70000040300473045022100c99a04d7505d3777422ae2eac4361e162a2066ed06a1f03640c1bead223dff7302205a1fece7542933c42d03b65147b53b626faa87180a1fcfb19368786b95eef87e007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e57fa0cb90000040300473045022100bbd1fc402c02a40cbc7b4816c9779fd44beb764b61a471962753a626708dd8ea02201b838381d0d57b4c41bfa4edcf13295fb8e4589834f5305b362766ca3ff8a5a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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