checkout.vc

Issued by R3

About this certificate

This digital certificate with serial number 03:7a:53:bf:ed:23:c2:23:a7:1c:1b:6e:c2:f1:a8:f4:de:87 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=checkout.vc

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:53:bf:ed:23:c2:23:a7:1c:1b:6e:c2:f1:a8:f4:de:87
Serial Number (int): 302962629021749505598839323876626431008391
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:c4:a1:20:ae:0b:ff:d7:60:80:1d:51:6a:f3:64:43:f2:da:73:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6c:11:68:79:d1:1e:88:ed:57:05:bc:0d:48:9b:3e:36:58:b0:8f:df
Fingerprint (sha256): 0f:5a:ad:ef:16:07:c2:bf:68:98:21:4e:a6:68:8b:52:40:bd:37:73:c6:55:66:0d:03:a5:24:0f:66:0d:7d:8d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate checkout.vc

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for checkout.vc

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bbpardee.us
brendonmarottashow.com.arizonavalleycleaning.com
checkout.vc
connecticutstatenationals.us
contactosexo.com
dennyselectric.com
jamwithjesus.com
legendofrobertredd.com.shsaadi.com
logcabinvillage.com
nyorganizers.com
ozzom.com
planetltc.com.bankruptcyblogs.com
sahealthandfitness.com
sanantoniointeriordesign.com

Other certificates including the domain name checkout.vc

(limited to 100 certificates)
checkout.vc
checkout.vc
checkout.vc
checkout.vc
checkout.vc
checkout.vc
norwoodwater.ca
checkout.vc
puratae.hilltophorizons.ca
checkout.vc
checkout.vc
checkout.vc
checkout.vc
checkout.vc
rplayer.co.za
checkout.vc

Certificate

The complete raw certificate details for checkout.vc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vK06PoBVegg12zzoXc2
sfqTKYpdHT0S6/VwI61OTvlHD53JdaGHN163Ym1lQdYyKi9WBPUz3pIjppmZfewT
zzgpIqJ+s18MUMiWt01Sw+ER44ygScWpkBuwxhpwwtAjQn3gGd+JKROnOG3lyX9S
lG03eYN2K0KSB2CJB3NIkdgdbz8Z0+Lcg0n88FAUmxb8XEcG7CvmSdlQ6KMbDoBq
oW2wRlNFgwBaA4JMYrnqfK1bszAR3UthTrsjhsv1w/9XHhNTr81V77lqOAQ2kTPt
RT6y0YCnHLBupraw8zX4rPNuF8rRXDVr9BPX8b81v1GdO8xop6ltWQjdYIpngrs0
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302962629021749505598839323876626431008391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-09 04:38:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-08 04:38:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'checkout.vc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27134680387266360777526990836572791737802710317456659434752515329335506001130744366606106094846655114658183028100161933307634176291117325072709774918933697778650666078251113907705857605729660578852467142646957330900561662902694236272685428538437873233960219896492160414335202926523888733557141838240463308930449278206998861033425348091047481937210768770441255101657312942410235664918715621563344647763852310009500375404120035455147569815522812531330269099986353512647856517037255042517955652755694831725318533676736979506348301118216032614934211400241911973664910823959713892686333630333425383538692592706238017123369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbc4a120ae0bffd760801d516af36443f2da7398
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (341 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbpardee.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brendonmarottashow.com.arizonavalleycleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connecticutstatenationals.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contactosexo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennyselectric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamwithjesus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legendofrobertredd.com.shsaadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logcabinvillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyorganizers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozzom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetltc.com.bankruptcyblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sahealthandfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniointeriordesign.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c4d1538640000040300483046022100a1410b2ce670e45bd5485ff474da006c744333d80f8d552d3db3273b6b014329022100c602c874f0d8e876a2e5c7f78ac5401a0482949ce90626881e8dd56dafb4b35e00760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c4d1539d8000004030047304502203700b1e0da4dda6878f64bd41f3be230c9ef6c5854c4bf87c0d5c19ded12bcde022100aa0d347aae8becb18463382a4198baeb903fa79dedc11024ee80fec5754d929c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000c80f73b9286c34e7550e9ef5797d060d1db131f8b134abf6dd04b9e40e17ab593792a94b2a7e18278f18fc6493c89e71fc2e593b11c9ba79edc2c505aba5b67ba887082b58ed2b45c907c89a8e76ea1cd9b141e9c986789a83c87988a4b6210da28eb4c46673d95b357f2b89f1c400fb6559017b3c25f115fab3207f5dd1bed4c6d06f7b9981d0267ccfb3d118f9d5d1750d92c43ec40f4a60f4248c36491eadf5432d698d30878dd6b2626e1052296113a3358b3bd4702c059df8d04d86c5fc443bef27698fb5647de0914d7c2f5fa9edd9675227b209096b306cca6d18da99aa20e5006e133e8d75d0b203dc6557736dcef74809564e8e8ae1f46ef8d08f7