desmill.com
Issued by R3
About this certificate
This digital certificate with serial number 03:96:c7:e9:ae:9b:81:3d:62:5c:bf:b1:cb:89:e9:15:4a:33 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=desmill.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:96:c7:e9:ae:9b:81:3d:62:5c:bf:b1:cb:89:e9:15:4a:33Serial Number (int): 312644942551210380333269599754401718028851
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 79:61:42:73:2a:35:39:dc:d9:4b:64:04:2f:93:03:13:f2:0b:84:0c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 61:0e:5e:6f:41:3c:fd:58:db:e5:c8:b4:4e:da:10:a5:40:66:95:59
Fingerprint (sha256): 18:13:76:5e:35:1b:08:4a:32:49:f4:a2:69:52:f1:76:76:11:da:0a:94:36:72:18:73:09:7c:25:4f:22:94:9d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate desmill.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for desmill.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
desmill.com
www.desmill.com
www.desmill.com
Other certificates including the domain name desmill.com
(limited to 100 certificates)
laytonmiller.com
pawsforabeer.com
desmill.com
tacospanish.com
desmill.com
desmill.com
unabuenaspanish.com
desmill.com
desmill.com
laytonmiller.com
pawsforabeer.com
tacospanish.com
unabuenaspanish.com
unabuenaspanish.com
desmill.com
laytonmiller.com
laytonmiller.com
inpraiseoffolly.co
inpraiseoffolly.co
inpraiseoffolly.co
tacospanish.com
unabuenaspanish.com
bilingualseattle.org
laytonmiller.com
unabuenaspanish.com
inpraiseoffolly.co
unabuenaspanish.com
laytonmiller.com
inpraiseoffolly.co
tacospanish.com
inpraiseoffolly.co
inpraiseoffolly.co
tacospanish.com
pawsforabeer.com
laytonmiller.com
desmill.com
unabuenaspanish.com
inpraiseoffolly.co
inpraiseoffolly.co
desmill.com
laytonmiller.com
desmill.com
unabuenaspanish.com
bilingualseattle.org
desmill.com
pawsforabeer.com
laytonmiller.com
unabuenaspanish.com
laytonmiller.com
inpraiseoffolly.co
pawsforabeer.com
pawsforabeer.com
desmill.com
tacospanish.com
desmill.com
desmill.com
unabuenaspanish.com
desmill.com
desmill.com
laytonmiller.com
pawsforabeer.com
tacospanish.com
unabuenaspanish.com
unabuenaspanish.com
desmill.com
laytonmiller.com
laytonmiller.com
inpraiseoffolly.co
inpraiseoffolly.co
inpraiseoffolly.co
tacospanish.com
unabuenaspanish.com
bilingualseattle.org
laytonmiller.com
unabuenaspanish.com
inpraiseoffolly.co
unabuenaspanish.com
laytonmiller.com
inpraiseoffolly.co
tacospanish.com
inpraiseoffolly.co
inpraiseoffolly.co
tacospanish.com
pawsforabeer.com
laytonmiller.com
desmill.com
unabuenaspanish.com
inpraiseoffolly.co
inpraiseoffolly.co
desmill.com
laytonmiller.com
desmill.com
unabuenaspanish.com
bilingualseattle.org
desmill.com
pawsforabeer.com
laytonmiller.com
unabuenaspanish.com
laytonmiller.com
inpraiseoffolly.co
pawsforabeer.com
Certificate
The complete raw certificate details for desmill.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgISA5bH6a6bgT1iXL+xy4npFUozMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMDMwNDAxMzVaFw0yNDA0MDIwNDAxMzRaMBYxFDASBgNVBAMT C2Rlc21pbGwuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw+Br FKliYSsJsij5orfna/qpKfWfezLesb1CUX3hdC6UgQ72NAvxfhoME+nb3K4zosur p9xSd42jO17NPNt5BI2ldwftW6CT5n+kS4pumOK8uKuBkW+MXMWftD6hd0TTQbut MnhgUxViRqe4ZqTZ/nbAUox4I5NvSVoA9CEYC+HSvkTF+X0Vr1m2mLScuDOCWQBq Jd5pcuSTYTMApfXujwbN8YWnM4hauqVaC2TdF+3czS2DlzzSjWGmMRQOBjVBDBp4 2GluxRgWhWJTaBCalhHV/k6pSm6vRtSBsrFQ1wQZyrHDgqRfT8nGJFD7HPj9hmUa 96vREszvvENv/YrdpdKSYcrwkhhLt2fEdMySUNhSYJFsE1vC2euqiOgc0Kl/tVgx ecCFtUVsVnpIRN4YmF1wZ/S8lUmMOK8h/j+OoKFaAohpro4JGwoIBx4WnuFwpdsR 4VuErMrQd/Ij3GS2QMiqS6WQtxkowuawH3sKl5i9ZUW3IunAGeMIbYE6J2L5uYjj Fjd7SFzLFdMl+FoiQl7ADLhrj3D6Xg55J3v+cpAE4LzzzAIWIdKHerNwadw5VNhO 6oRiyX7Plhwabn/2PTPZaKVe30w/EWp6gFhNFKr7gpagsnFJ5kBtj04VjDEev9R+ 3omqRJi7Ye0AvMFn8h3cPste1SvrIQl9e6OOiqUCAwEAAaOCAhwwggIYMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUeWFCcyo1OdzZS2QEL5MDE/ILhAwwHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wJwYDVR0RBCAwHoILZGVzbWlsbC5jb22CD3d3dy5kZXNt aWxsLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQIGCisGAQQB1nkCBAIEgfME gfAA7gB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjM2yylUA AAQDAEYwRAIgXR3Pmz7BocSxDOIyIVbbJ8noVRXpPvcmhQTCf2YgUM4CIH151Fif j2SiP7qyTdVlgRCJsQSJrhOL9FltVHpBWteCAHUAouK/1h7eLy8HoNZObTen3GVD sMa1LqLat4r4mm31F9gAAAGMzbLKZQAABAMARjBEAiBYkWvxPRK4cEpKbmybVudG gw+cwTLwnst2+BHiUYU1fAIgKSpynP4HkHD8T2v68mLYQev4ocEFCyYg0gRMWuMF 0MwwDQYJKoZIhvcNAQELBQADggEBAGSnUsqGBvODumE13NesJp7Kf640SjlDrYN4 3EQqbrt2g7faXiTbbw9d0EnNUXg2WyaHN3Q/X1F41V0j3qZlkWK2k3PyaS2jr1hA hbGbkSFehVromfj5ZSxbSJkIDZPJjt4ptG9KIYIP/GzprgPDA4C4I5KjhzWORgTt EQnuY8Vcj5aMvG0BlLAopjHa+6G45SoJMafij4+SkY0uqEyKeI8+BUCjCKaAGdhP 5//Fm8oUugy1s2AIf0DM5Zjdha5ti252w1yk41VaUBD35FcQhde3dZCabmNrt8zX MoOD+MyhE5JQigtSTzhVbzdKmY9K4I6XHhCr54voxJgTlVx3S/4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw+BrFKliYSsJsij5orfn a/qpKfWfezLesb1CUX3hdC6UgQ72NAvxfhoME+nb3K4zosurp9xSd42jO17NPNt5 BI2ldwftW6CT5n+kS4pumOK8uKuBkW+MXMWftD6hd0TTQbutMnhgUxViRqe4ZqTZ /nbAUox4I5NvSVoA9CEYC+HSvkTF+X0Vr1m2mLScuDOCWQBqJd5pcuSTYTMApfXu jwbN8YWnM4hauqVaC2TdF+3czS2DlzzSjWGmMRQOBjVBDBp42GluxRgWhWJTaBCa lhHV/k6pSm6vRtSBsrFQ1wQZyrHDgqRfT8nGJFD7HPj9hmUa96vREszvvENv/Yrd pdKSYcrwkhhLt2fEdMySUNhSYJFsE1vC2euqiOgc0Kl/tVgxecCFtUVsVnpIRN4Y mF1wZ/S8lUmMOK8h/j+OoKFaAohpro4JGwoIBx4WnuFwpdsR4VuErMrQd/Ij3GS2 QMiqS6WQtxkowuawH3sKl5i9ZUW3IunAGeMIbYE6J2L5uYjjFjd7SFzLFdMl+Foi Ql7ADLhrj3D6Xg55J3v+cpAE4LzzzAIWIdKHerNwadw5VNhO6oRiyX7Plhwabn/2 PTPZaKVe30w/EWp6gFhNFKr7gpagsnFJ5kBtj04VjDEev9R+3omqRJi7Ye0AvMFn 8h3cPste1SvrIQl9e6OOiqUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 312644942551210380333269599754401718028851 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 04:01:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 04:01:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'desmill.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799106947643475878631423797816639970689034881324769178042067054311516928275309673665014444164888681039013045117318984747606045102760207242392452652964412247789822533253551476145877443004608880230580709884991354959692885123738275568441947707875202292840151317526522172809481336964347739799113076552122935160480395750824825841680084672763069020580954350301677578754147970736323101219286199758950332379312235264803704032493734552170029074070464532387549065577514801787153271443334667308442757201228073881485027568324421991644578534787080876595082559010844621879783542246535001223864476655001346179400604350610470481601480736507445034285170151807422928848900248462349665806587789277182820926210226175155087867829939756363096326493119952079731612872348628541384759070236362573680948203308712411601814308702200976004008143697208895455853440117391911635389749706134239258073409383080046973119453605412717815553586379371912608677914160384344591892314275970340231898090839537188539834898535391797227081584186422807986794969470653917335655236514029232408304698546986187084085729727759277250471208215198684327430569838966412077490888191936474614081383267505561337421679826349897796242222860337489366626347625253617221692070539431613485311494821 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 796142732a3539dcd94b64042f930313f20b840c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desmill.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desmill.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ccdb2ca55000004030046304402205d1dcf9b3ec1a1c4b10ce2322156db27c9e85515e93ef7268504c27f662050ce02207d79d4589f8f64a23fbab24dd565811089b10489ae138bf4596d547a415ad782007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ccdb2ca650000040300463044022058916bf13d12b8704a4a6e6c9b56e746830f9cc132f09ecb76f811e25185357c0220292a729cfe079070fc4f6bfaf262d841ebf8a1c1050b2620d2044c5ae305d0cc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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