www.heartgift.net

Issued by R3

About this certificate

This digital certificate with serial number 03:43:e3:f3:34:03:58:28:9c:ec:31:7e:bf:30:2a:be:32:34 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.heartgift.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:e3:f3:34:03:58:28:9c:ec:31:7e:bf:30:2a:be:32:34
Serial Number (int): 284438773917113684514553581755299190944308
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 19:ba:70:31:00:88:ab:69:f4:8b:9e:62:20:d4:b8:32:99:bd:3e:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9d:55:ef:2e:d0:3d:c7:d2:ba:5a:73:8a:55:d9:4b:1c:cd:99:82:ed
Fingerprint (sha256): 18:bb:09:aa:bd:02:f2:96:b2:53:60:3d:e9:27:3a:f9:c4:c9:bd:2b:25:ea:52:e5:14:ce:d3:84:92:a4:f2:39

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.heartgift.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.heartgift.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

heartgift.net
www.heartgift.net

Other certificates including the domain name heartgift.net

(limited to 100 certificates)
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
test.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
test.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net
www.heartgift.net

Certificate

The complete raw certificate details for www.heartgift.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18BtGT2TuZf1bo8pLrUT
0ili8kC++5uikiII2RHHrG9jFWL3YCxje+bGfzJ3OoRxQ1Yc2lBKmxW3/iiEvCcz
tTR+Jvi4Z0yRKNXeFKb0Y+ZE4arTSN8UR34mOgaXGKppRYEj6QtcSoN/T7LD82+K
dSNaEkGgaeiTmY7jGpiLDXeE8wtLbcVVangU7ZiUPe/iUKGbUn0VJz/D5KB1RmLN
wUVOz1uXyTLei301cogoTLMczNxyX4Xesb/p80Jiie7Xti0ufj6pGH0WFOTvUTEJ
e9o+qJddfxyPsCl2pKLN/Fe6rkkGCrq0I4lNB8iKSo1ESxLCGPWN3vBWOJ8NAxmT
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284438773917113684514553581755299190944308
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 06:19:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 06:19:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.heartgift.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27236124446906474744892346717197623027553366571402198160283715764739159547386913195862844699581208957999561164192690370746752529865055959437280409530673650459784057350431104360057963682088394672211238428547697344009088378534833177327162833247299864196243002749084682859400493276391612553168874120934536705875174109586517468939542195110708276761665247134957771598082146900478497354871339982181301724187379127097988141381324089353417173567318435078694730518388584521257735160363003232944128938188809332725925842106349743036293717705014014542758295187609722423818278194168060887339439780200807523128220152773672865207071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19ba70310088ab69f48b9e6220d4b83299bd3e14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartgift.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartgift.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c958af0d100000403004730450221008b6dd0fbd7cddf3df75010a0cafa53c41af4f199db58686099f63c23d053c91f02205ff2d36206532e07306fc106d459eb7a80bea1e76dd27feafb8cdf992f7c48c40077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c958af0dd0000040300483046022100d7ce3c15fb40baf550f4d1a555449584b753b0db4b938444ffdaf98edda33581022100b73951a01c61c8e052d6264b22c03cc89bbc33d7f2b1a801ba2fd634f2c8a213
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b3421642b06e9e70f406b7cf590c992ad6b042ec7c3b5de5971ba3126904ad190808333c283c3997b0f500fa0c5f1a8a16fcfb247f4ba9bd92fe98339060cd34f9d8da53077bd933619da3de2a0f339d661f6082807ff7551e7ade11ed416b9dcfcac602147584a07de2d33c020ecf9f59debc2aea38358464d2aa3ac9f5dd5fedad6f403927650791c2c778eeeb0a52a8baa82d0d912da03e43c39b4aef6086f96c2bcff2c6c03297fe977267f49fa5c07f859505adf6c584133483d160833d27d3e75c23e960b6bf9556f31fa05e826f44276a93b4854d205a9a130139422d0b907983049bd987c3aa893778560edadfa3135329d91cfb6009b8dc85dc0e04