customsweater.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5c:68:be:ba:00:63:e9:79:03:c4:b2:62:13:16:5a:3c:12 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=customsweater.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5c:68:be:ba:00:63:e9:79:03:c4:b2:62:13:16:5a:3c:12
Serial Number (int): 379894351504291185639532319005274837498898
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8f:ad:f6:b3:1c:e5:38:33:e8:94:e5:f6:03:3a:52:6e:ea:29:55:38
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ec:5e:e2:7d:e2:4b:e6:c5:70:87:9c:77:e3:b9:67:6e:a7:4a:b0:81
Fingerprint (sha256): 17:e9:e3:a1:fa:47:01:90:4a:0d:38:84:c8:4c:f1:e4:11:cb:54:5e:a2:3e:a1:46:88:36:75:4a:bb:98:b3:50

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate customsweater.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for customsweater.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

customsweater.com

Other certificates including the domain name customsweater.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for customsweater.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7zCCBNegAwIBAgISBFxovroAY+l5A8SyYhMWWjwSMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMjAyMTUyMjdaFw0yNDAyMTgyMTUyMjZaMBwxGjAYBgNVBAMT
EWN1c3RvbXN3ZWF0ZXIuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAtaAeQHJTdfbT+E6Y3Do1C7zFQM5PSl4hi40QgJLWf6dDgaXxgZeDAi5aohy2
O9b9BJZBFYjx/DHD4r4OGKAsrerbkxewoMz/pVoZkhxAyeUT+/4eSmgK5iAHKs9y
pKThjFU49r78IbUxTpWxyz14n8dJsfsHSuDyx6CT3QSkZu8p7uoiibuqA6CFx/xE
zLUz9/78KJY4oRFNIiQhU+X4evwHQ4QHxTCFPAyL4+9zVfvDui61DoSK6d5YhsDm
qCRMCUH87QpX//cFjbBCB4S4+Fxh2qD+fDYvb+k3jURQ7NPob4l3yCZ5T17nVP2a
IMzG9MVNnOmhNFNU19K4gxHYZeJmpwPNbK0rjQ7kicdbmdcT0LsHoyOnZ+oGO70F
DdHlNRhdHeaUW+2HRI8VEJfyHtW/xLLjtGxkHix/m5r0eH6rk95iGNME5IXeUjO3
0MA9gQJh8NSc3D3nm0T5ht7TML9E2Q0/8OQ+b0gtUO3fVWK/UTwh54mwIWEHysq/
0ALlknHlZB/tlUgRccI2kqInseH7ZJKnjvXekEcOydNygmh0dGkv6+12KFgMvEda
s7mu6v/o7skTfvA78ZOCb4S+w6dwG5AaFsOSFozyI01k4RhZE297YZFfspOWj1eU
t520dJFG1t/W+tNBe6gTLdSjTA9qx91WoMjjNkPVnZgYMzMCAwEAAaOCAhMwggIP
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUj632sxzlODPolOX2AzpSbuopVTgwHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wHAYDVR0RBBUwE4IRY3VzdG9tc3dlYXRlci5j
b20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA
dgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYvu72TdAAAEAwBH
MEUCIHGxsUTs55gLblUO8V9D29Hp33/MGezkvimj+qiraGP8AiEAt6RekqNV9nqk
RAOot9fQW7Z4JsUwgq/Tw5ySGUXfkWIAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/TH
vQANLXJv4frUFwAAAYvu72TaAAAEAwBHMEUCIANv4MXDulaxWhdDzeh03ctcHtjf
VWPFUXjl9F4W0vqrAiEAz3l51XHZt9pLF6reVF5FKQCp98MAuZpgVijptVi5X9cw
DQYJKoZIhvcNAQELBQADggEBAA7LRwC7lP8+KNspuFuEbGnh0zteDgX+xa5gNRL7
F5P8TVEioeivnolZyF0p3JABGR3C3YyyplAHDUVrJnTpMgl5PtKbIJcKP0dkJsRh
ikSfscrYLxCOAsJQVWbv6YixeDQvsZmE7nrpAn3E1BPRxZ5w901ZrSKR0nDx2/DG
X+04udnTSsyrdBBED8PuaWbmRhvhlhs5gO2W5wUuML5mp15QviCQPZBodaY7UYVL
9iOTy9ChepUtX9RIVhGgsfYLEhkwwjOM2keHDLHhWWyTEk3XbfZD1WRcovcaNIjW
r+Jyk/Pp549Z7w6Hy1VRTjvGU2szZqlHs73iIhNYiiGYVhA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379894351504291185639532319005274837498898
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 21:52:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 21:52:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'customsweater.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 740967237038205569314211966592628684693305478397754288309644261508695079624428136361035165599073565773269823538486054728146302366064262567224675329969590619457435815111973960268217812951080055973615559784375224991843244239735046561799861820742778082871780227562690098518538448047719242733661715602227542010113592289037588942043530481360741225080960409397378022079828435136297803126248231573155384731072444931701723860375074955922607747851715512206368056115819612783789500846717639520738535507060423983864733639977915935795906775418355807599473311540259557529826727014196305663523353423635010286672058590783887764869214495490563840295952273907773700929454181296028379504383528660354623880243838338741030117071751656157230663302977854365208491655338165963366865934544658145580647825729238659792566373236385477629337676987409479439228136656456950759041223451809729961632287794141009867125618957986543825804123458286607224522553568014205449793190314717397337248811360940471322537848960706075951851143418085925843817089225572153538155457968279322277207643835257050490521097485340337872116747076719846664598191296126774821394785057658555170593097642609755613960187407818360762050668013548433343707942290337674641380700574504960048630346547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8fadf6b31ce53833e894e5f6033a526eea295538
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customsweater.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018beeef64dd0000040300473045022071b1b144ece7980b6e550ef15f43dbd1e9df7fcc19ece4be29a3faa8ab6863fc022100b7a45e92a355f67aa44403a8b7d7d05bb67826c53082afd3c39c921945df91620076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018beeef64da00000403004730450220036fe0c5c3ba56b15a1743cde874ddcb5c1ed8df5563c55178e5f45e16d2faab022100cf7979d571d9b7da4b17aade545e452900a9f7c300b99a605628e9b558b95fd7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000ecb4700bb94ff3e28db29b85b846c69e1d33b5e0e05fec5ae603512fb1793fc4d5122a1e8af9e8959c85d29dc9001191dc2dd8cb2a650070d456b2674e93209793ed29b20970a3f476426c4618a449fb1cad82f108e02c2505566efe988b178342fb19984ee7ae9027dc4d413d1c59e70f74d59ad2291d270f1dbf0c65fed38b9d9d34accab7410440fc3ee6966e6461be1961b3980ed96e7052e30be66a75e50be20903d906875a63b51854bf62393cbd0a17a952d5fd4485611a0b1f60b121930c2338cda47870cb1e1596c93124dd76df643d5645ca2f71a3488d6afe27293f3e9e78f59ef0e87cb55514e3bc6536b3366a947b3bde22213588a21985610