hello.dailyburn.com
Issued by R3
About this certificate
This digital certificate with serial number 03:ed:01:6e:17:9b:2d:d7:3f:cc:4d:ec:b6:4e:35:3b:04:d8 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=hello.dailyburn.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ed:01:6e:17:9b:2d:d7:3f:cc:4d:ec:b6:4e:35:3b:04:d8Serial Number (int): 341985679614983352647073931656841653847256
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: fb:84:2b:bc:7b:f0:48:21:09:55:bd:8b:41:8b:d3:aa:a0:d0:05:0e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 4e:d7:eb:28:1d:51:28:a4:fb:62:4e:84:63:fa:f0:fd:6e:c7:e0:70
Fingerprint (sha256): 0e:8e:0a:50:59:2b:76:91:bd:fc:a5:70:fc:22:4f:b7:5c:66:a0:d3:98:0b:d6:d5:45:6a:b3:64:03:35:71:fb
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate hello.dailyburn.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hello.dailyburn.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hello.dailyburn.com
Other certificates including the domain name dailyburn.com
(limited to 100 certificates)
dailyburn.com
links.hiit.dailyburn.com
stacksocial.com
staging.dailyburn.com
stacksocial.com
secure.dailyburn.com
iron-bank.dailyburn.com
stacksocial.com
stacksocial.com
partner.dailyburn.com
dailyburn.com
api-uat.dailyburn.com
kprc.dailyburn.com
media2.adlegend.com
skynet.dailyburn.com
stacksocial.com
support.dailyburn.com
skynet.dailyburn.com
stacksocial.com
support.dailyburn.com
kprc.dailyburn.com
unbounce.dailyburn.com
www.dailyburn.com
staging.dailyburn.com
watch.dailyburn.com
links.hiit.dailyburn.com
partner.dailyburn.com
links-stg.yoga.dailyburn.com
iron-bank.staging.dailyburn.com
hiit.dailyburn.com
try.dailyburn.com
hiit.dailyburn.com
app.staging.dailyburn.com
pxl.dailyburn.com
atlantis.dailyburn.com
yzfit.dailyburn.com
support.dailyburn.com
running.dailyburn.com
partner.dailyburn.com
atlantis.dailyburn.com
unbounce.dailyburn.com
unbounce.dailyburn.com
hiit.dailyburn.com
iron-bank.dailyburn.com
order.store.dailyburn.com
iron-bank.dailyburn.com
api.dailyburn.com
dailyburn.com
secure.dailyburn.com
stacksocial.com
click.messages.dailyburn.com
support.dailyburn.com
skynet.dailyburn.com
mkt.dailyburn.com
watch.staging.dailyburn.com
atlantis.dailyburn.com
dailyburn.com
dailyburn.com
hello.dailyburn.com
yzfit.dailyburn.com
streaming.dailyburn.com
partner.dailyburn.com
api.dailyburn.com
new.dailyburn.com
running.dailyburn.com
kprc.dailyburn.com
dailyburn.com
app.dailyburn.com
app.staging.dailyburn.com
stacksocial.com
partner.dailyburn.com
streaming.dailyburn.com
stacksocial.com
store.dailyburn.com
stacksocial.com
yzfit.dailyburn.com
staging.dailyburn.com
api.dailyburn.com
secure.dailyburn.com
unbounce.dailyburn.com
unbounce.dailyburn.com
www.dailyburn.com
app.dailyburn.com
order.store.dailyburn.com
skynet.dailyburn.com
stacksocial.com
test1.staging.dailyburn.com
support.dailyburn.com
hiit.dailyburn.com
links.yoga.dailyburn.com
dailyburn.com
dg-0125-dc75dcd.client-tls.adestra.com
watch.staging.dailyburn.com
try.dailyburn.com
dailyburn.com
stacksocial.com
try.dailyburn.com
dailyburn.com
preferences.info.dailyburn.com
yoga.dailyburn.com
links.hiit.dailyburn.com
stacksocial.com
staging.dailyburn.com
stacksocial.com
secure.dailyburn.com
iron-bank.dailyburn.com
stacksocial.com
stacksocial.com
partner.dailyburn.com
dailyburn.com
api-uat.dailyburn.com
kprc.dailyburn.com
media2.adlegend.com
skynet.dailyburn.com
stacksocial.com
support.dailyburn.com
skynet.dailyburn.com
stacksocial.com
support.dailyburn.com
kprc.dailyburn.com
unbounce.dailyburn.com
www.dailyburn.com
staging.dailyburn.com
watch.dailyburn.com
links.hiit.dailyburn.com
partner.dailyburn.com
links-stg.yoga.dailyburn.com
iron-bank.staging.dailyburn.com
hiit.dailyburn.com
try.dailyburn.com
hiit.dailyburn.com
app.staging.dailyburn.com
pxl.dailyburn.com
atlantis.dailyburn.com
yzfit.dailyburn.com
support.dailyburn.com
running.dailyburn.com
partner.dailyburn.com
atlantis.dailyburn.com
unbounce.dailyburn.com
unbounce.dailyburn.com
hiit.dailyburn.com
iron-bank.dailyburn.com
order.store.dailyburn.com
iron-bank.dailyburn.com
api.dailyburn.com
dailyburn.com
secure.dailyburn.com
stacksocial.com
click.messages.dailyburn.com
support.dailyburn.com
skynet.dailyburn.com
mkt.dailyburn.com
watch.staging.dailyburn.com
atlantis.dailyburn.com
dailyburn.com
dailyburn.com
hello.dailyburn.com
yzfit.dailyburn.com
streaming.dailyburn.com
partner.dailyburn.com
api.dailyburn.com
new.dailyburn.com
running.dailyburn.com
kprc.dailyburn.com
dailyburn.com
app.dailyburn.com
app.staging.dailyburn.com
stacksocial.com
partner.dailyburn.com
streaming.dailyburn.com
stacksocial.com
store.dailyburn.com
stacksocial.com
yzfit.dailyburn.com
staging.dailyburn.com
api.dailyburn.com
secure.dailyburn.com
unbounce.dailyburn.com
unbounce.dailyburn.com
www.dailyburn.com
app.dailyburn.com
order.store.dailyburn.com
skynet.dailyburn.com
stacksocial.com
test1.staging.dailyburn.com
support.dailyburn.com
hiit.dailyburn.com
links.yoga.dailyburn.com
dailyburn.com
dg-0125-dc75dcd.client-tls.adestra.com
watch.staging.dailyburn.com
try.dailyburn.com
dailyburn.com
stacksocial.com
try.dailyburn.com
dailyburn.com
preferences.info.dailyburn.com
yoga.dailyburn.com
Certificate
The complete raw certificate details for hello.dailyburn.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgISA+0BbhebLdc/zE3stk41OwTYMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMjQxMDAxMzlaFw0yNDAxMjIxMDAxMzhaMB4xHDAaBgNVBAMT E2hlbGxvLmRhaWx5YnVybi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCm2r5dK8U80HPcmMRmqwYLF4FTBgg7PYAiIhcJv2o9gJik+q/18Q0MWAF2 B5VNzzQ0Pz4HsS/T4X6pYMkd6efGVPggHZNg3F2QWCa0AzwMr0NW/9nEI5y6WQOT h5fbqRmWM1UNxMOXI+qQj+oAkIDnXGPW/KEInDvlT0ALO5lAoeMon9LFujk2jja3 eknwvaN+CtTHEMy+AuSWYZt2zOmR6QiK611Ae3znXvcFKfPq2KCEVeaN+jYZXD5M VOFwsIVRfHJf6cHKLWQEDIedKvRzNehTGB/WclCQOmF+o0qkvJRa9+FkCebfc/xl rhxWdb0KSEW/f1QOLeU8BdhVsGh9AgMBAAGjggEiMIIBHjAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFPuEK7x78EghCVW9i0GL06qg0AUOMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMB4GA1UdEQQXMBWCE2hlbGxvLmRhaWx5YnVybi5jb20wEwYDVR0gBAww CjAIBgZngQwBAgEwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD ggEBAJjGKfwmZg6BiLrmHd8xY7QAnR52I3128It7z4CRdRvf8nY8d4aJEsrhBimk jvio/51YFMtX624q990dkhTek4Y6EWXYgsVLruB2aebXCKmQeC0La8AemSyU5LvC +KK+BAN+TKqDW1qQzzQlt2D16fub/TlMBm6BTeY+zYi3ZC6M5Cn/bGAfQ63n9EAv 4uUTlapgHK4/frch+F/D7jDQCK3wH+UmyZG11yqiqIgpDtqymozt8jHqcDuggS2M +FoeNEBDNXMn5dvGUf+cq7He2fRKiq/wfDib6FWMo9MBefIAIUZa8wwxNCDAb7ml K15pxsxMcEsCOMkDbW0ejlOIfgg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptq+XSvFPNBz3JjEZqsG CxeBUwYIOz2AIiIXCb9qPYCYpPqv9fENDFgBdgeVTc80ND8+B7Ev0+F+qWDJHenn xlT4IB2TYNxdkFgmtAM8DK9DVv/ZxCOculkDk4eX26kZljNVDcTDlyPqkI/qAJCA 51xj1vyhCJw75U9ACzuZQKHjKJ/Sxbo5No42t3pJ8L2jfgrUxxDMvgLklmGbdszp kekIiutdQHt85173BSnz6tighFXmjfo2GVw+TFThcLCFUXxyX+nByi1kBAyHnSr0 czXoUxgf1nJQkDphfqNKpLyUWvfhZAnm33P8Za4cVnW9CkhFv39UDi3lPAXYVbBo fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 341985679614983352647073931656841653847256 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 10:01:39 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 10:01:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hello.dailyburn.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21063425118289851574330973535086738123977921102968276217983712174139008552824215740564531306467877340861315086358210854431516015214062910772845923245678045898872148173862934797912397255636205409686775954190713147281631354615307686895700900528948642543779176191322772656018549979997644892184479632112865331328596115896903083146829759993994451971141377921023803146146300830136131402478384466028874547324095336621924326632079983178592791998986324716313426711511195429007716247971884227776730810171050325330536354287082303705071204529801504307169222901489820812500959684277255037111147414097233910478723421043964209293437 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fb842bbc7bf048210955bd8b418bd3aaa0d0050e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.dailyburn.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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