novantatre.com
Issued by R3
About this certificate
This digital certificate with serial number 04:b0:de:9c:dd:7f:24:a7:71:6c:cd:82:dc:5e:77:37:04:50 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=novantatre.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b0:de:9c:dd:7f:24:a7:71:6c:cd:82:dc:5e:77:37:04:50Serial Number (int): 408634743410986181845874873040253905994832
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 9b:93:67:de:41:dd:3b:13:6c:26:5f:e9:40:7a:5f:ed:1f:e1:61:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 48:c5:86:8e:07:20:f8:1f:cb:7d:5f:a8:0e:1e:b1:c7:90:31:18:73
Fingerprint (sha256): 13:bc:61:f2:8d:b2:a2:db:63:eb:d3:31:f4:da:c5:d4:a7:f9:e6:3a:12:58:a5:7f:72:2e:35:43:f4:e4:f4:77
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate novantatre.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for novantatre.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
novantatre.com
Other certificates including the domain name novantatre.com
(limited to 100 certificates)
cheapveganmakeup.com
novantatre.com
www.waterfordinsurance.com
jaylene.org
www.theofficiallybettersite.com
omaharegenerativemedicine.com
www.pubblicitaperaziende.com
www.greatnh.org
fiduciainformatica.com
agentiassicurativi.com
www.hotelij.com
novantatre.com
coinlube.com
www.tree-farm.com
www.novantatre.com
www.interchaintoken.com
petitefleur.com
kohalagold.com
www.xmaslightingestimate.com
www.coseni.com
www.bestslotsitesonline.com
www.advancedcannabisscience.com
www.mmakyrgyzstan.com
novantatre.com
www.waterfordinsurance.com
jaylene.org
www.theofficiallybettersite.com
omaharegenerativemedicine.com
www.pubblicitaperaziende.com
www.greatnh.org
fiduciainformatica.com
agentiassicurativi.com
www.hotelij.com
novantatre.com
coinlube.com
www.tree-farm.com
www.novantatre.com
www.interchaintoken.com
petitefleur.com
kohalagold.com
www.xmaslightingestimate.com
www.coseni.com
www.bestslotsitesonline.com
www.advancedcannabisscience.com
www.mmakyrgyzstan.com
Certificate
The complete raw certificate details for novantatre.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgISBLDenN1/JKdxbM2C3F53NwRQMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMjEwNDUyNDZaFw0yNDA1MjEwNDUyNDVaMBkxFzAVBgNVBAMT Dm5vdmFudGF0cmUuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA nlvBSsl8zKXACS1SCQIzPK2agpaiSuMXzWsNfgGiFztU7nE0osDEyu53TSBHLWO6 DPSiwzOr1hxqIaNXAqycEUUHOEjr070n+i+DZ5YNefL6YtNyczCPHa9g5IUGg+Aq VxC9fZWYJyhZDfOJGDFnpQFJnTKAOp7kQ3N3wpQd3i6v2hQzJHWl8HJCysBhIYiv zCG5UKxfxPHr+K3DsI2U2+bLNIwJu0W3Iqy630XlymKY64jWhVlXNUvSrMZdLDNK pnJc+DZ+TXdDuyVvHCs9P3Jgefba00IG3rfeDqHhW/n0VMfSmNnVe0ykQ5GDyAaJ r6l5jMiCjtn3qiEHpXv61GVF+l7ZqT/ZRWj0FmGlxLRubkCZCKUkZkINIvWAAJfz KCRapDVgi1P3Eb0WYfM6N8f1Cw7rQwqozwkdTeAyjKNDNTLLS30n2uK8SueXGGs+ mWaVZigm4vBnP3rk2oFLMEjD+w0yHihQyBcHe10vt8A4MJTDemYmBJ8OoikLUnxn WRy8SgRyoPQ+dhGWxZt93Y4CFgrw6OMtw1ZUvpm8AxEIJYs9Zrkfy2QeahJXHC2U PhCbLI/ZXO9X1vSP2oycxWJS36kmRZCL+78rL3Yb3IE/ZTSPeU7Aqy91TY997CSz ZZ/G7YhSitYpJV50DkCT8J2xlIJYxIyVj+0fWwgYM+0CAwEAAaOCAhEwggINMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUm5Nn3kHdOxNsJl/pQHpf7R/hYZowHwYDVR0j BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6 Ly9yMy5pLmxlbmNyLm9yZy8wGQYDVR0RBBIwEIIObm92YW50YXRyZS5jb20wEwYD VR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwA7U3d1 Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAY3KOUE7AAAEAwBIMEYCIQCA ehTXylc5XZoJONnAuHagodYNP928uqsBmqG0G3DHbQIhAOOGUeInY+2D0hbdpMoW X5EgRcddp/psKISxLqh862zIAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZ RnEftZsAAAGNyjlBTQAABAMARzBFAiEA6SYOtE4KtPsgUyY6x8Tsi3KM7sNdUvAH EUJz8MFpxQACICsNRl0wQtEnG7lowe+/ZrCfCA8lZvgj3Wh+mo8qR4RsMA0GCSqG SIb3DQEBCwUAA4IBAQA/ihE0SU06jZqjhBPrm2g5bdUt9DsVQ2NGkvnGF/UPHGEA Hew8jkcqJUnuD2QMfb9wvbqOMr5rtE0zobDP7fUC5JsnEiwAxfI+PxOZUEjT3h2m Zx51X1sNaP2oOyShgHjbex3M2kJ7f8wxhv3Wb9mzsCx5hJqdYHUgN73sKYzhoFFA NzWhgY184dqMR9giDuSMQRZfX/wBrS8GxR66rTdK7l16eJiVkls3eZPKbRMfnOGn Ye5jq4WEJA1sWFgkgZBqTLn2eQhhW5QHaEJbLn7Zufwsfb8nJVQCqBHhT187tUgr kWSFU096ZF7DRFB2r5RFe1f4dR9MltZUGbpIKrb2 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnlvBSsl8zKXACS1SCQIz PK2agpaiSuMXzWsNfgGiFztU7nE0osDEyu53TSBHLWO6DPSiwzOr1hxqIaNXAqyc EUUHOEjr070n+i+DZ5YNefL6YtNyczCPHa9g5IUGg+AqVxC9fZWYJyhZDfOJGDFn pQFJnTKAOp7kQ3N3wpQd3i6v2hQzJHWl8HJCysBhIYivzCG5UKxfxPHr+K3DsI2U 2+bLNIwJu0W3Iqy630XlymKY64jWhVlXNUvSrMZdLDNKpnJc+DZ+TXdDuyVvHCs9 P3Jgefba00IG3rfeDqHhW/n0VMfSmNnVe0ykQ5GDyAaJr6l5jMiCjtn3qiEHpXv6 1GVF+l7ZqT/ZRWj0FmGlxLRubkCZCKUkZkINIvWAAJfzKCRapDVgi1P3Eb0WYfM6 N8f1Cw7rQwqozwkdTeAyjKNDNTLLS30n2uK8SueXGGs+mWaVZigm4vBnP3rk2oFL MEjD+w0yHihQyBcHe10vt8A4MJTDemYmBJ8OoikLUnxnWRy8SgRyoPQ+dhGWxZt9 3Y4CFgrw6OMtw1ZUvpm8AxEIJYs9Zrkfy2QeahJXHC2UPhCbLI/ZXO9X1vSP2oyc xWJS36kmRZCL+78rL3Yb3IE/ZTSPeU7Aqy91TY997CSzZZ/G7YhSitYpJV50DkCT 8J2xlIJYxIyVj+0fWwgYM+0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 408634743410986181845874873040253905994832 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 04:52:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 04:52:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'novantatre.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 646045981242793484334303204040400688533498293030976674737640139207549456183068191214486152905011705499103800698506076528730547225192042748119119566585954937488599090992160049910798017939520043341387221016129017511950146205338884588110854522753540167179982925239636497729891734408479072447878640933088648443119062375536998611094239994331438979145901438855192774995953543263361485747671138071094381149105728424995789689386209962320976641675841899195578175873488433265563490073064288574186336931836378405285825379446784917131941747730466314508710160680372082041631534525104733748140439596815763350868535940227734742481900669270269584387486799038243262803513808001055250113306132646578482570064388902855854241434679843413296494172913573396662853075304130569337829131114756162774143569808013621287973795235917380971592681454719261790933289848842706771037922868417013912338953557991089334380238856070376535083413097932978974130369870391492971238153024183252643823609899289130444879213184061119566257615027795147752263295451373841563620895073182325532448369047409969021109530124479843315577176033177373896139564487336568657402570158513096025206842395654055755652062281285122283819360657034530311167932010730225122621837648349404102504494061 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9b9367de41dd3b136c265fe9407a5fed1fe1619a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novantatre.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dca39413b0000040300483046022100807a14d7ca57395d9a0938d9c0b876a0a1d60d3fddbcbaab019aa1b41b70c76d022100e38651e22763ed83d216dda4ca165f912045c75da7fa6c2884b12ea87ceb6cc8007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dca39414d0000040300473045022100e9260eb44e0ab4fb2053263ac7c4ec8b728ceec35d52f007114273f0c169c50002202b0d465d3042d1271bb968c1efbf66b09f080f2566f823dd687e9a8f2a47846c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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