www.nfcwearables.com

Issued by R3

About this certificate

This digital certificate with serial number 04:af:80:13:97:29:6c:50:ed:5e:80:e7:67:84:c0:60:c2:b3 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.nfcwearables.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:af:80:13:97:29:6c:50:ed:5e:80:e7:67:84:c0:60:c2:b3
Serial Number (int): 408168800841231726116600268878573673169587
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 08:8b:9e:ce:16:e7:4d:c9:4c:b4:3e:3d:cc:6b:c4:8b:46:1f:a5:37
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e1:b9:1c:c6:66:0e:5c:0a:15:78:5d:d5:9f:79:c4:3c:15:c4:9a:18
Fingerprint (sha256): 14:84:a1:0e:00:a5:45:ef:0d:53:ef:2f:bd:9a:1f:da:6d:cd:43:10:97:02:5d:21:f6:2b:16:5a:88:97:34:dd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.nfcwearables.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nfcwearables.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kansascitystemcelldoctor.com
marksmanbrand.com
masterseclasses.com
nfcwearables.com
olympiamedical.tech
politicialfigures.com
prestigesunglasses.com
reggaecasino.com
segwayrental.org
shhdonttellmyhusband.com
sportsmedicineminnesota.com
thelaurenparker.com
thintimate.com
web3reach.com
wildlyhappydads.com
www.kansascitystemcelldoctor.com
www.marksmanbrand.com
www.masterseclasses.com
www.nfcwearables.com
www.olympiamedical.tech
www.politicialfigures.com
www.prestigesunglasses.com
www.reggaecasino.com
www.segwayrental.org
www.shhdonttellmyhusband.com
www.sportsmedicineminnesota.com
www.thelaurenparker.com
www.thintimate.com
www.web3reach.com
www.wildlyhappydads.com

Other certificates including the domain name nfcwearables.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.nfcwearables.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq21E+Bd3vthyApXrtIwk
ktNZg0uzzuBD0zFhyi4ycDxP7GFxsJHzT9XfXPb8vs34qH9apK1pzJy+tHpqKQ6G
Rc1ceh4AVrN7oyXzMzVNar/eLNXtgTGAsStYTnYZ3d9WYd5kdA5xAfWsKfGhvHh0
tww7cVwfPqdfbnPAwbI9C/owACzIhrEXhr90cdCqfWbvyuGNsX4vBpk5dBSzn6/b
8VE7Inqr71qSynS9PwN8Ni4yugb7mmMA+Gnw7cHzLPkrqCzIh5MOaK2Wj8tlPVcO
f5FgVl8vJBs7a8eAfWXLDUNy427RQmndYutMvJUa3xFrSAbMBVjQ4qOKLWoHl7l9
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408168800841231726116600268878573673169587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 18:18:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-13 18:18:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nfcwearables.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21640632903790035999733001209824139922381154495849453593313073291277119341839576018376745269702520679646942646679710378297235136304328919386764879366088927633617647911722976108200167052361758340908076869667210782622009291356409378282600188237220651481511248782713853871344886738538251173813642452364532228863039652243168012976317607261720018774275897768655170385723550551034405714848280839349941261824314666563620375794848691524424643827155042283029973148704352565580277299770705430246789198049815102349941431101946873728585398344903311730708925705003181297951985675252726297773859743786926568101340235531202755919161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							088b9ece16e74dc94cb43e3dcc6bc48b461fa537
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (704 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansascitystemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marksmanbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterseclasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfcwearables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympiamedical.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'politicialfigures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestigesunglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reggaecasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segwayrental.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shhdonttellmyhusband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicineminnesota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelaurenparker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thintimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web3reach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildlyhappydads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kansascitystemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marksmanbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterseclasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nfcwearables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olympiamedical.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.politicialfigures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prestigesunglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reggaecasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.segwayrental.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shhdonttellmyhusband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicineminnesota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thelaurenparker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thintimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web3reach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wildlyhappydads.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f7db0b87f0000040300463044022057ab523ec2feb5fd44000a159aa965c8351efe4d368d189ac46aad5908d8440502207f86fa5411e715c48baac94391986ffb6a6736bde65221318428b9cf9bad22e4007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f7db0b9410000040300473045022070f88516eb899559165c4f73213fa3484ce7fd29edb7ba49df568d5543cfd7dc022100fec9488d16056cd0076233da314c55ee2e10f49437a13696ab222023961f98a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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