pineconstruction.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5b:20:06:4e:85:85:29:f7:ac:b1:80:e5:8e:f0:27:e9:3e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pineconstruction.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:20:06:4e:85:85:29:f7:ac:b1:80:e5:8e:f0:27:e9:3e
Serial Number (int): 292345121227338915573039925579383564659006
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:aa:7d:e2:7a:06:76:78:88:85:0d:c0:05:83:7a:e9:28:5a:8e:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4a:82:8e:51:c4:cc:7c:69:77:9f:9f:40:d2:0b:13:2d:91:e6:ba:bf
Fingerprint (sha256): 1d:46:98:e4:60:3d:22:c9:8a:4e:30:62:0a:0a:7b:24:40:f5:ea:f8:0a:8e:52:70:08:a9:47:3e:1d:f1:57:b8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pineconstruction.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pineconstruction.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pineconstruction.com
www.pineconstruction.com

Other certificates including the domain name pineconstruction.com

(limited to 100 certificates)
pineconstruction.com
www.pineconstruction.com
pineconstruction.com

Certificate

The complete raw certificate details for pineconstruction.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArcHPFuNucjQld9K6rdgA
9qNud09mNt5fJrBMeqohlJyod17SwaT4WUGcU4WsF/PJjCxUgnX59qY/OOuYD24Z
/adzux0AGGLzUsmn71fNsdjCQ45PascD2WNbbeZAhUt5cbKo8ZegcysH0+SUULhl
Mlavpu/S58P4fYnBFjCugkiwY0TaxKBg57PUBdQWIVk+9FWoqj6AdfbRAE09bGii
gkdPrr/mw0qFV6kb7e6zIWyBdJgIO8XgPZ9uzhr+NZ0mi2+Pzlkuf2t15OXJJSqu
Va8DKwOJ1+/oQOSVkQiUc+HhhxYcGYJ/x4zqaJlShek+bB1MRP7rNnx30sOqrunn
FwecTyUWfyfQzaZUQWHVkRazZwEQlCTXgzbGOpYfsJwY5ezoGCCI740gAPCZETco
HqEb+fQtNZvo++sbwH9VrzinkjbOWzJBnEtOdRaythyKmxjfcf3zL1Pkh7XesoCo
BxjILQNCOSoWNAyobbMrGrV0HDM+sNxaEsNp+eqdFnjsiMR1gwyLxhyiJ2MkjFbk
Y6tmw0ibSqBbjNAwuNfD2JnO8zGkioBgJ4k6rD4bKTaEjOtXui/iLxp0AUfa1wc5
Kl/353Dy/d+7XNwU6kg+3+HSPcRHIM1RgB34KI3/zQTZPMVrVvD6e3yiZbA1jecC
xtbpsrj/KYzZDFsSu++SKXsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292345121227338915573039925579383564659006
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 11:08:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 11:08:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pineconstruction.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708866984332468152488973499163547012971375694506573297140486319321021142474354880102923985312319034120455639692694980185814836475700260044338214474775095739665667056510940747748363970691188537719981279149671307143468622797499645003022950223926297139255560161230290808721952864405833480337589386302986617926158260841685586131302247569842298815847657889855071722703901615544015452751095091115647101637977363025896032789332697353266232941772961578831853485686472686607939343473976470671718351038804001056659646967279255331693681058993719261521259416753479500220907597000685246525044591809285359463941098717794457871678064000536858142045494822689444068605773253097858574537144695924550415722404637419222316067941228903765012999997806872809210436931218921658818150347197570314384125936939718749597833900105674054439565457252692808944877749538821922477710265600627333779399648096103161178489008155467872052104430102814308981237564826194871554751295554365799875263412284286266765775573422272560822259794459618332396732137212452750399868539575651799133129592890079422071349320738603431279183297269790086840524398651384070454116426557739536164631779484690804813363230147351526465493068727162006290604851987649500370695157025184506437730183547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3faa7de27a06767888850dc005837ae9285a8ea1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pineconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pineconstruction.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b5c6fbf8800000403004830460221009081dd9238103438873d47945f77f942ffd5f504b4c6367352648ee53f15b918022100e76a6fc6de42fb55248147472a9a01855393e6309c121490e9f1a1535eb72f9f0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b5c6fbf900000040300473045022100b09d0ebd65982893699ce5a90655f886b08b3bee37cfae406ede02eeb9c2b1a4022034511686378590175a5569c7f2d2afcca5e85eea69adffd2f7e7ee4184de71fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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