www.mechanicdurham.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a7:98:7f:0d:5d:b7:29:f5:8b:e0:e2:3c:bb:fe:94:f0:53 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.mechanicdurham.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:a7:98:7f:0d:5d:b7:29:f5:8b:e0:e2:3c:bb:fe:94:f0:53
Serial Number (int): 318366715419234034917659759560282418245715
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:f3:ee:41:94:60:b5:16:22:2f:83:8f:7c:11:a4:87:0e:cf:58:fa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5b:bc:b6:04:b3:b1:d8:40:a1:62:bf:bf:22:b7:08:93:ab:a6:03:6f
Fingerprint (sha256): 0f:0e:fe:ca:61:eb:1e:16:66:2a:2a:e5:85:2d:1f:77:77:1a:f0:17:68:f4:29:e8:12:5b:c5:81:29:33:bb:25

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.mechanicdurham.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mechanicdurham.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aranglen.com
auroraprivatewealth.com
bugbite.org
dmall4all.com
fpxe.com
fractionalboardroom.com
globalpixelsystem.com
indianapolisstemcell.com
linkedtoken.com
manchestersportsmed.com
mechanicdurham.com
piersongreenhill.com
roigdomain.com
shortingsatan.com
thelivingwaterprogram.com
www.aranglen.com
www.auroraprivatewealth.com
www.bugbite.org
www.dmall4all.com
www.fpxe.com
www.fractionalboardroom.com
www.globalpixelsystem.com
www.indianapolisstemcell.com
www.linkedtoken.com
www.manchestersportsmed.com
www.mechanicdurham.com
www.piersongreenhill.com
www.roigdomain.com
www.shortingsatan.com
www.thelivingwaterprogram.com

Other certificates including the domain name mechanicdurham.com

(limited to 100 certificates)
www.mechanicdurham.com
www.mechanicdurham.com
www.mechanicdurham.com
www.mechanicdurham.com
www.mechanicdurham.com
mechanicdurham.com
www.mechanicdurham.com
www.mechanicdurham.com
www.mechanicdurham.com
www.mechanicdurham.com

Certificate

The complete raw certificate details for www.mechanicdurham.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4G3Svdn3SuS/8Oy92En
4DuLG5uf4kq6CVoCmsCedtGLthldNc9Kn6hsmIYVz3NYCS4yZuGcrEVp3R3xhy9+
KmxIrHfMFPqx35iyz65GveGuWIjXcN4VL0Oq7L5JTLH1UrVjs8poPmDrulczmiJX
pj3VmrUycrTGg2cBcgca0vtcwEpQYT3Vfir0k6hSlR8/M6ayU3/8dl5rsahtXA4m
cx/7EnLzwYUd8I8Bj2xN7sgetM2SOv4ymLqgtTYaiL9DkpQB36iCpXETA/ZS6U4g
dfqTpTcjZTPykN/+vsZJr1u5E8mqyl/q2/poDoc5vGCicQodgWrFa4eo7sYsg1wK
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318366715419234034917659759560282418245715
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 10:58:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 10:58:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mechanicdurham.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24175481586046671286532391228099522092733111534434005359408008870615560869707179623872433433994751323864590603819665964744210790720424183729485109700172796453455537648746867005636517597257899440764023300350359207667412287092349209574193935321871384206989056978470881607833150796475856340895877081202590751094522081121243446709152974632415119523666399664217089370306177954619951382351115251329944219136287531698061591669748071604409502114704437667968615493782269269542067354391643794842964775629353970465182441047605996171170959405024256360064187360360847273899394146738630913961457556004763236713806647234570128984659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71f3ee419460b516222f838f7c11a4870ecf58fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (658 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aranglen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auroraprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugbite.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmall4all.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fractionalboardroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalpixelsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianapolisstemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkedtoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manchestersportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechanicdurham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piersongreenhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roigdomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortingsatan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelivingwaterprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aranglen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auroraprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugbite.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmall4all.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fractionalboardroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalpixelsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indianapolisstemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linkedtoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manchestersportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mechanicdurham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piersongreenhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roigdomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shortingsatan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thelivingwaterprogram.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f581197b00000040300473045022100af6fb05e28fece98ec55a1a7f9f14af79d4f7e9c96fc0e1ccfc77a81df7c0c4302203e25d1880f8d06b8197109489ca689ccf6f2569bb867d03780fe97aad823d25b007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f581197b9000004030046304402205f9dc449eb5fc32e7e8e5a5bc340640a5dd263a23ac42e0bf7ba5c3a1f0e7398022036ff03f7bdd6a50a5f531725f033804486bdb7110cecc43df0f520def1b5d74a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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