conforme.com

Issued by R3

About this certificate

This digital certificate with serial number 03:9b:9f:57:cf:b9:0d:24:c2:a0:ac:75:56:7f:79:26:23:a5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=conforme.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:9f:57:cf:b9:0d:24:c2:a0:ac:75:56:7f:79:26:23:a5
Serial Number (int): 314292427862302761697085017622074626548645
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:e5:4e:a2:d2:72:fa:ac:35:35:26:27:7d:03:c1:5c:45:38:b5:ee
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 52:53:dc:3f:bf:a2:58:6a:ac:8c:1f:f9:64:cf:6b:b1:da:5f:79:0a
Fingerprint (sha256): 15:12:97:2d:af:33:13:b4:11:6d:6a:d5:95:2b:19:48:e3:12:b8:96:cf:bb:20:a7:bc:18:69:db:bf:be:39:a2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate conforme.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for conforme.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

conforme.com

Other certificates including the domain name conforme.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for conforme.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgISA5ufV8+5DSTCoKx1Vn95JiOlMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMDExOTE3NTBaFw0yMzEyMzAxOTE3NDlaMBcxFTATBgNVBAMT
DGNvbmZvcm1lLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALZz
YQtX9arQMCGF2k3RMPSzR2loeSCV9R9ipRf15kEv3jA3BP+EP9EGDmlwhkKayajG
Ak414JUauX/u64l/bcL27BODB54fZyaEu3nd5Mf9pKyIk2ktt+YlJNoJe7pd2pEi
22l9vQxU6uWGNnKvhXDbDZLs9nDbyFRy0f49SBKepjP9XnOmXowvOq7M7wNbruT/
RUmPhPuStQ4ljtKKU4fHnF9cv3vWQ3TI+xdhYfQMk35EENkxBoZ6cBLDoHHzeVV+
uEcE+2hwKHM32P7f0NLYOxFvj8LTOaX8xpAPnd9+2v90Zvx93s0m3TLi3jzCIrtj
LnBVIbot2B0fNs04NTm9zlVg4zMI4ZDTBF1CToL2rfmkzVhRAUifgTmy2HLCtWvk
IXQ/1yVMIyP+VhvTIZ8hJdWRBfyypLczmjOS5dSp4JYZ4woJqnVWjuwcD/ahEobW
AgDNwAxZkKFTdW1jcuauLskbUGA+Gpd8Jl4HgsYA/Wzzu4M8+qnNG3wpL8AcUHED
0Rw1m9XHLizgyc0rHIOp0sU2IBIZ31YiuWWglLkdvhxpUqlZfreNTuJ3gEQRxfsJ
pP1dJhmmi4TlRgekLdFN2BWOFsiaeaD4ggKXQjGQQnDHUlD/oZL/ss4SwY4w6EtW
lhomwC3zQRj+/KYlaOCOmX65lDP6KgueN7SsEY2pAgMBAAGjggINMIICCTAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFHHlTqLScvqsNTUmJ30DwVxFOLXuMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMBcGA1UdEQQQMA6CDGNvbmZvcm1lLmNvbTATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AHoyjFTYty22
IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiuzj3ZoAAAQDAEYwRAIgK1AMzZ4l
wo/UTfyh3zGPz4dZcMGyrDGNWpcQ6lhnvfgCIHNyVf1SFaGhgEGNRnDmAQZo2uFG
82eV6KlKAWKYYNfdAHYA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4A
AAGK7OPdiAAABAMARzBFAiEAhIt7W6dfzRFW+uRr7oEIgv6n0Ktt8EFO/ele2msG
GTwCIFZKFQEbYuGL19h6+k6Ojqm1/elJCcl+vH3O+S1URZBeMA0GCSqGSIb3DQEB
CwUAA4IBAQCy+7tTV7J/RDrILqLmrUD7SvWpHWCq+hSCg9pV+pwi2GKsZxFGh5xq
GVYQoexrNu3ESDs9TVij1GhpkwtdKoAh8k/Cbu8lQy7xq0D4ZzsIoq9rL8/DoksF
2fcjikNFj4c5YnsYJFFHgUWjC+qw/+o+uitywDE6gKK0BUidWds/JbO5nkczLOaN
NBUd5eBMLY43Ef5ITeYmtJ3xR85W39FJeIpIwzzXh+n26yVhxgnsc1RWNjDuEIGK
v95SoRpGpHmMYSbbTcmn/sJtbWOfZeZdajonbwnh4Ndn61+L3/p/55rQu5vd8bA/
MRQGTo02kukPWxo/OaOHqOiEq9kTc3Dn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtnNhC1f1qtAwIYXaTdEw
9LNHaWh5IJX1H2KlF/XmQS/eMDcE/4Q/0QYOaXCGQprJqMYCTjXglRq5f+7riX9t
wvbsE4MHnh9nJoS7ed3kx/2krIiTaS235iUk2gl7ul3akSLbaX29DFTq5YY2cq+F
cNsNkuz2cNvIVHLR/j1IEp6mM/1ec6ZejC86rszvA1uu5P9FSY+E+5K1DiWO0opT
h8ecX1y/e9ZDdMj7F2Fh9AyTfkQQ2TEGhnpwEsOgcfN5VX64RwT7aHAoczfY/t/Q
0tg7EW+PwtM5pfzGkA+d337a/3Rm/H3ezSbdMuLePMIiu2MucFUhui3YHR82zTg1
Ob3OVWDjMwjhkNMEXUJOgvat+aTNWFEBSJ+BObLYcsK1a+QhdD/XJUwjI/5WG9Mh
nyEl1ZEF/LKktzOaM5Ll1KnglhnjCgmqdVaO7BwP9qEShtYCAM3ADFmQoVN1bWNy
5q4uyRtQYD4al3wmXgeCxgD9bPO7gzz6qc0bfCkvwBxQcQPRHDWb1ccuLODJzSsc
g6nSxTYgEhnfViK5ZaCUuR2+HGlSqVl+t41O4neARBHF+wmk/V0mGaaLhOVGB6Qt
0U3YFY4WyJp5oPiCApdCMZBCcMdSUP+hkv+yzhLBjjDoS1aWGibALfNBGP78piVo
4I6ZfrmUM/oqC543tKwRjakCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314292427862302761697085017622074626548645
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-01 19:17:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 19:17:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'conforme.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744333914038260547572633765160442143356942309758535999740141644875607661539849484097421090776451162811958208878689801095079806776039810761193251454713233084150640833062717922222877519588813082188691850644166854919136567980265889023420639149365383600163917285976492602806214667640103372038552359412100224906492075669538786272227384296482559020369642306859735529842618871167568828387985621552400322685472563361223579122357687052237225797901310255744539963401871628237777881687030589903864108285586978054023495267647662750478972384436139080156838214992876785660745830406570599962329839082304658622788679717894348719486649181089037882636899195168040182828457023133627917022338662174031118732948379482676418319474213522592770728437151340571663962399571650871779777480804217633775500177961249295334975574315512289676786934300079238035650864533104848974479037482335788200593976550367885573937963266170186695650150593310554551463949246239262157640668228126406402951137175270208092878312580802854561081616457101512120728772051662725530598556578011980791626530871554831282071112896553257882982243312556107314536292316341210892881290546498367046616767690939969956738855742150862027392798394218281333113109992741465948134636175196984597013433769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71e54ea2d272faac353526277d03c15c4538b5ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conforme.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aece3dd9a000004030046304402202b500ccd9e25c28fd44dfca1df318fcf875970c1b2ac318d5a9710ea5867bdf80220737255fd5215a1a180418d4670e6010668dae146f36795e8a94a01629860d7dd007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aece3dd880000040300473045022100848b7b5ba75fcd1156fae46bee810882fea7d0ab6df0414efde95eda6b06193c0220564a15011b62e18bd7d87afa4e8e8ea9b5fde94909c97ebc7dcef92d5445905e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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