aswn.com

Issued by R3

About this certificate

This digital certificate with serial number 03:82:41:05:0c:3b:7c:b4:a2:d9:72:c9:dc:70:94:cf:00:28 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aswn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:82:41:05:0c:3b:7c:b4:a2:d9:72:c9:dc:70:94:cf:00:28
Serial Number (int): 305659991524315023745048891085731381837864
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0f:c4:49:06:8f:b9:21:c8:0f:fc:d4:d3:1e:c8:a2:bb:34:6f:13:4c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ef:1a:9f:36:83:60:2c:0d:3c:2f:44:d5:9c:12:42:ce:49:4c:0e:a3
Fingerprint (sha256): 17:99:21:49:47:30:b7:5b:31:64:7f:83:e6:f1:84:e8:1c:ad:d2:9d:4a:53:dc:e0:68:00:f0:a8:45:02:6b:23

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aswn.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aswn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afilinet.com
aswn.com
bernardschumaker.com
canesandrhizomes.com
clairefitzpatrick.com
deedtoken.com
designforbathroom.com
logistics-systems.com
mail-a-photo.com
mycensorship.com
puncast.com
trvlreviews.com
walmans.com
worldsmostdangerousinsect.com
www.afilinet.com
www.aswn.com
www.bernardschumaker.com
www.canesandrhizomes.com
www.clairefitzpatrick.com
www.deedtoken.com
www.designforbathroom.com
www.logistics-systems.com
www.mail-a-photo.com
www.mycensorship.com
www.puncast.com
www.trvlreviews.com
www.walmans.com
www.worldsmostdangerousinsect.com
www.zonagas.com
zonagas.com

Other certificates including the domain name aswn.com

(limited to 100 certificates)
aswn.com
aswn.com
key2defense.com

Certificate

The complete raw certificate details for aswn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2z/x7SUmAy+PPEvNcYL
l3NmR2bXKA3wkn0DHmr7qvsD4OiXVuBS8V2b1a3hAME32c7UmIumFlya2EM4ewxb
St0/m0irYKGY4KSGQhdrus+bbSF2EnfyrfDf1O5kD0xDw9yrSP2cJuhnfRwB1Hvg
Y7V1zIUwlAD4D427cGNYR1GhblAKnwqqQ2wF38li27dWCRF7NuDfZK0voi6di8bj
JAXkuUpF5NTFgjTQZJ9fYx5UXgxtkreqRP2rgZ6GEAdcm+XaaqYqY18yqTf00KU7
cPE1cUeIxP1fcKoIRR59VL995x3gKnFoRHQZjYL7eizbRtfe9yA4P+CGKNZa6Aiu
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305659991524315023745048891085731381837864
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 21:05:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 21:05:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aswn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23155359288492512794268551380997101022543206719985089605680332688771037577062156415452745504549545027956703721006315926219482381583084595635125983543011276462336819847404979280962433123903996984345416661331518425307119886348187944405203534358665444177333537538997915572265060429337912763453011207829138729478994651803030351328197930375568823754152750353659513035262116841444321470977524859455448542024007950888874941298768520737134808910809387524989846829702158497764968748867018689082711448516927579949990137174075441293396740586925985217895333635416890962776554791753401925400004878763411364520244236729049705655897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0fc449068fb921c80ffcd4d31ec8a2bb346f134c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (614 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afilinet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aswn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bernardschumaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canesandrhizomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clairefitzpatrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deedtoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designforbathroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logistics-systems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-a-photo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycensorship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puncast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trvlreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldsmostdangerousinsect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afilinet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aswn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bernardschumaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesandrhizomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clairefitzpatrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deedtoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.designforbathroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logistics-systems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mail-a-photo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycensorship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puncast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trvlreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldsmostdangerousinsect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zonagas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonagas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018951496a020000040300463044022073d60ba1458af864a22c2b5a5930914b15ff391df215ed3e538cd2f49186f865022058bcbe524143644739c8fd7a269cee314982059dcc1f23869eb35437b5f9c0fc007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018951496a060000040300483046022100b775321899bd3b655c49dd50ce108a3281c84df45c3885c8ff23a10e86546d02022100878359b3ecceedadbd0099d83e77d9fe21220ff88307449d58560d899b9a3c1a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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