customdomain.niceshop.co

Issued by R3

About this certificate

This digital certificate with serial number 03:84:40:28:3f:0f:97:d1:2e:1c:cd:8e:0c:a2:8b:57:d5:2b was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=customdomain.niceshop.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:84:40:28:3f:0f:97:d1:2e:1c:cd:8e:0c:a2:8b:57:d5:2b
Serial Number (int): 306339409791476405713516834731941724411179
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:40:7d:11:c7:44:b0:2f:02:33:49:b4:44:ed:a9:32:a7:26:e9:a8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ef:09:c4:e8:19:c1:fd:34:a5:70:89:2d:2f:c7:f0:85:75:5e:e8:88
Fingerprint (sha256): 19:94:d6:b3:5b:ac:04:41:ea:52:82:c1:a2:23:3f:0b:5d:42:90:50:b4:6f:5f:64:b9:ec:23:f9:59:85:27:02

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate customdomain.niceshop.co

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for customdomain.niceshop.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atelierp2n.com
boutique-hec.fr
boutique.resistons-france.fr
boutique.wingobear.com
customdomain.niceshop.co
eshop.petitsfrenchies.com
goodies.shadow.tech
niceshop.co
niceshop.olybe.com
shop.dailymotion.com
shop.gymlib.com
shop.lesalondesdames.paris
shop.sportheroes.com
shop.topito.com
store.webedia-group.com
www.humourfaitlaforce.com

Other certificates including the domain name niceshop.co

(limited to 100 certificates)
*.niceshop.co
customdomain.niceshop.co
*.preprod.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
*.niceshop.co
customdomain.niceshop.co
*.preprod.niceshop.co
neon.niceshop.co
customdomain.niceshop.co
*.niceshop.co
api.preproduction.panopli.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
*.niceshop.co
customdomain.niceshop.co
32d6e2d7.niceshop.co
customdomain.niceshop.co
*.niceshop.co
839f61b0.niceshop.co
*.reloaded.niceshop.co
839f61b0.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
*.niceshop.co
2a777ba7.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
2a777ba7.niceshop.co
839f61b0.niceshop.co
839f61b0.niceshop.co
*.niceshop.co
app.panopli.co
*.niceshop.co
customdomain.niceshop.co
*.niceshop.co
customdomain.preproduction.niceshop.co
neon.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
*.preprod.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
*.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
api.production.panopli.co
customdomain.niceshop.co
api.niceshop.co
customdomain.niceshop.co
89a0809b.niceshop.co
api.niceshop.co
*.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
*.niceshop.co
839f61b0.niceshop.co
*.preprod.niceshop.co
89a07c83.niceshop.co
2a777ba7.niceshop.co
839f61b0.niceshop.co
customdomain.niceshop.co
*.niceshop.co
*.niceshop.co
*.production.niceshop.co
api.niceshop.co
ab32b93d.niceshop.co
customdomain.niceshop.co
2a777ba7.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
2578cb33.niceshop.co
*.niceshop.co
customdomain.niceshop.co
*.niceshop.co
*.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
2a777ba7.niceshop.co

Certificate

The complete raw certificate details for customdomain.niceshop.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wbyH05oineCxSgtQY/0
njd1+GsMil2R67aMLnsNNQqvtVpguZlJxSNTG8F2dRlYVsNNrD6NWJHWm5sY9gZf
jFqCYB1aE2PyNCFNco3R3wEW+XBRB7JUO/gpE67rWMEVu/oHZpMsdmqhVe+hquhd
bVkRMm6OKBLQR/uUAJgwy2P+GGY1qNqqZq8OByTKOvjJ4RmqmgNq/7d2ENn6owru
VbABOOWcoAypsayxn9ATEuftof8MSync4VT4REPYjwe2stncrgsNz9a5VONM1Wkg
fLPLX843rkF+hffdRrCdsvCoENE9KtB2CVkhTvTyYFbhfB3U5C6QljmlW+Qjy+D8
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306339409791476405713516834731941724411179
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 13:00:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 13:00:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'customdomain.niceshop.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28659520324096042828873848643224772198855934555795146589163488731712618052623699015743393996270743449043233076246113293368082069763310145509084511563115016411351955595151412769227923840730039980345266974052819514676160844693351621225790033498281629539817226085194580493041062366443052600215797420750750340676347989287413374677570350603561810233263285400601178423735332987412780584981238196024537458400542742670274579722675866185195468864460884063284954073148697167721564155179961572013603563412173743044985552589704750385654682869309263530868345458027248906014314569980363149219122834178892337961798448405827687611533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68407d11c744b02f023349b444eda932a726e9a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (356 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atelierp2n.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique-hec.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique.resistons-france.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique.wingobear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customdomain.niceshop.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop.petitsfrenchies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodies.shadow.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niceshop.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niceshop.olybe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dailymotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gymlib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lesalondesdames.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sportheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.topito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.webedia-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humourfaitlaforce.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c4494535d0000040300483046022100c41713dee6bc15e328b796bdf0eaf5459fe1bfbd45599bb63c6e6ff5483b03ac02210094f3ade66b31e4601cd0ee2660fef834340de3d3ef1507db2707d0a9318730ca007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c449453d2000004030046304402205acf2eeadfcc040b6ff9e9643dc6c4439b847d5b3c3674bddbd48ae3ef415bde02206ec707a16da26b5b59c0c2298bb62343a8f67c0a50c71a1818c31d2b06ca47bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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