geeksmotion.com
Issued by R3
About this certificate
This digital certificate with serial number 03:e7:fb:6f:d3:1e:97:cc:11:13:3f:0c:82:0b:2e:f5:cf:72 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=geeksmotion.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e7:fb:6f:d3:1e:97:cc:11:13:3f:0c:82:0b:2e:f5:cf:72Serial Number (int): 340276301407923086433792730847257879236466
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 47:8e:cc:6a:2b:1d:1d:81:a9:61:20:b4:f5:a2:89:3d:29:f1:76:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 1b:bd:92:22:9c:c8:2b:ce:01:f5:36:dc:7a:bc:be:f1:6b:09:40:12
Fingerprint (sha256): 1e:a6:34:d7:4c:99:18:c9:8b:7b:12:fc:04:0a:0d:d1:e6:00:f8:94:59:c9:db:d2:bd:f2:54:5a:69:aa:95:93
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate geeksmotion.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for geeksmotion.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
geeksmotion.com
www.geeksmotion.com
www.geeksmotion.com
Other certificates including the domain name geeksmotion.com
(limited to 100 certificates)
dashboard.geeksmotion.com
serracredimoveis.com.br
geeksmotion.com
geeksmotion.com
demo.geeksmotion.com
geeksmotion.com
geeksmotion.com
geeksmotion.com
demo.geeksmotion.com
geeksmotion.com
fullcupon.geeksmotion.com
geeksmotion.com
geeksmotion.com
demo.geeksmotion.com
dev.geeksmotion.com
geeksmotion.com
dev.geeksmotion.com
geeksmotion.com
geeksmotion.com
dashboard.geeksmotion.com
www.geeksmotion.com
blog.geeksmotion.com
demo.geeksmotion.com
fullcupon.geeksmotion.com
demo.geeksmotion.com
geeksmotion.com
geeksmotion.com
www.ddcs.xyz
dashboard.geeksmotion.com
serracredimoveis.com.br
geeksmotion.com
geeksmotion.com
demo.geeksmotion.com
geeksmotion.com
geeksmotion.com
geeksmotion.com
demo.geeksmotion.com
geeksmotion.com
fullcupon.geeksmotion.com
geeksmotion.com
geeksmotion.com
demo.geeksmotion.com
dev.geeksmotion.com
geeksmotion.com
dev.geeksmotion.com
geeksmotion.com
geeksmotion.com
dashboard.geeksmotion.com
www.geeksmotion.com
blog.geeksmotion.com
demo.geeksmotion.com
fullcupon.geeksmotion.com
demo.geeksmotion.com
geeksmotion.com
geeksmotion.com
www.ddcs.xyz
dashboard.geeksmotion.com
Certificate
The complete raw certificate details for geeksmotion.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGADCCBOigAwIBAgISA+f7b9Mel8wREz8Mggsu9c9yMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMDkxMzAyMzNaFw0yNDA0MDgxMzAyMzJaMBoxGDAWBgNVBAMT D2dlZWtzbW90aW9uLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB ALMeev59yAPbboDiEB0U8ul146XnzcI5YlKB5jtdMAszB8kxLNaw0Os3cT7MtbVa qOsIEKMt54pr66Sa8vLW0c3I9iyOdKtdyagX2WGm1X/DP9VyGVPaq6xWQ4ReLDwR POVJoTT74eB671wQ2JrTOjbWuGULGVAez82VEfDk+3A4iu0QaYEj5lq603suGS48 LEl7SKUJGmJ7mI/1CI3qZ2EB38PtJ+s6XouRwPammXraJfkUqcKC3xj4eoeH/2pc fEHOsQ+RLFx3s8wjaGi7tUaC1+luu/mj4cDSdo1+/sBGyKObdUbnxVRb5UJkNyz1 Q8w1XdZzt3RYATP/dBDcfIeanAS5hY+BJJbvGLBZWGvxraW55vF8qvWTH9U/+GZP TIQ78EjtKEl+90P19enUsJIwvGE9DZKqR129KJwTJPya79JuCcftyAIwN6QKtniO RfQDKjqyU5ZjwpfiOom57J66a1AQPlFn1DvvSBhzb3PinEYeQvw33VVM9Fx73U0s MgWFu9MuGg4o+ZkTpddxb5sZqpp7A8TUVKpeLDNdeZ0J7/+3Tz0gwyb+f78PTKAr 0zhMtN8TRVqY33z9+98NSpnaBAg8zpyX+7qCsG/6PdRy43InRe+Ud85TiG6A8jCY 8JEzvkekonhgnsCmtLqVrOaEthQ6pG/6wgPShNQHrIbVAgMBAAGjggImMIICIjAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFEeOzGorHR2BqWEgtPWiiT0p8XZwMB8GA1Ud IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw Oi8vcjMuaS5sZW5jci5vcmcvMC8GA1UdEQQoMCaCD2dlZWtzbW90aW9uLmNvbYIT d3d3LmdlZWtzbW90aW9uLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisG AQQB1nkCBAIEgfUEgfIA8AB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5 2IRzAAABjO6INdkAAAQDAEcwRQIhAIhTbvdbwVnu6esBQbwjnfUxii8S9F46qbhy 6miXEzxhAiBcOgIdYDNXmpyS0YEli6I4eGQb4g5kccGPZ0CLZMOYcgB2AKLiv9Ye 3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjO6INeoAAAQDAEcwRQIgC+o2 mmqY4Iq0e0j+fDgxL5tyDLsKZAQ6WCpr30EG1ZMCIQDGVLCtLWtKJ/M1BJ1KsFcp eB3sPQvnYyZ34T3ZgSCvjDANBgkqhkiG9w0BAQsFAAOCAQEAFhKFK1Hfak8WUhFO ZMo7YC4Ap6uX9TumyLFs49kWA8hhIdlfA1k4ZxtIxu97LoWqpjZXItA7kpvUUmkr cb4VtO9n6N9TLYzh6Sp8YZ2/obndui6dGgAVHGT/YOn+zBWBmv/gCM3qjlrd1caE 12m0Y5Y13JrcHI+7yt/b5o+cu0FOVfabyMSJuXPSKoWP/HBLYiI9LrDaBRN7BorG Ni2XNzMu7pTxWT/BfwP8386dRPkfgQncL5wiHG/MhPJ99HU3oz49lRUqLPXse623 ZIEUtAvL1Pgj0ZOftNCOO5v+cX2qf0ICxb/DKsIKM+iQR+gBPf1foyESLHoABSNK oF+plw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsx56/n3IA9tugOIQHRTy 6XXjpefNwjliUoHmO10wCzMHyTEs1rDQ6zdxPsy1tVqo6wgQoy3nimvrpJry8tbR zcj2LI50q13JqBfZYabVf8M/1XIZU9qrrFZDhF4sPBE85UmhNPvh4HrvXBDYmtM6 Nta4ZQsZUB7PzZUR8OT7cDiK7RBpgSPmWrrTey4ZLjwsSXtIpQkaYnuYj/UIjepn YQHfw+0n6zpei5HA9qaZetol+RSpwoLfGPh6h4f/alx8Qc6xD5EsXHezzCNoaLu1 RoLX6W67+aPhwNJ2jX7+wEbIo5t1RufFVFvlQmQ3LPVDzDVd1nO3dFgBM/90ENx8 h5qcBLmFj4Eklu8YsFlYa/Gtpbnm8Xyq9ZMf1T/4Zk9MhDvwSO0oSX73Q/X16dSw kjC8YT0NkqpHXb0onBMk/Jrv0m4Jx+3IAjA3pAq2eI5F9AMqOrJTlmPCl+I6ibns nrprUBA+UWfUO+9IGHNvc+KcRh5C/DfdVUz0XHvdTSwyBYW70y4aDij5mROl13Fv mxmqmnsDxNRUql4sM115nQnv/7dPPSDDJv5/vw9MoCvTOEy03xNFWpjffP373w1K mdoECDzOnJf7uoKwb/o91HLjcidF75R3zlOIboDyMJjwkTO+R6SieGCewKa0upWs 5oS2FDqkb/rCA9KE1AeshtUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340276301407923086433792730847257879236466 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 13:02:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-08 13:02:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geeksmotion.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730742027900646706885260241017212175760056134049109549865944124341600140984982637768818494166489720502719293845677797523874097007820848404858934856292596837055880173913081260401005844991481266010798695411209627841284174022849048487954001345002401383262919846707586744388672640131683930315515870536345095470002459064318295389665937039939800773250065401478262735974398702477894988220302699361727093888494407377201795215308367838668615322310635782825691751712854286213556333465043739552202330275771575469029897371753877776243814685545272879074843900992496686235540013318022684026396380457846299961392815408160102205194702060044184167811821647649241359273427369830928570354686476834638858882609414649269908544745988380643006983620052410352366657759135745157768837645665532258858160927618452321655051646139075708614929595764885234322062250470642612613722173901425865512658906050396075825517423999562876211003035506122523577490069236063741373952951781551793774659908335474107323725176764533169245104789062878970825039913100771236245721421312917316465035876548499032543040741660020944772884443032803809476379132325125111394716937926499183222456352851252478661407347391936401322536448214975225673790181467438095166988082860039533605633689301 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 478ecc6a2b1d1d81a96120b4f5a2893d29f17670 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geeksmotion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geeksmotion.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cee8835d9000004030047304502210088536ef75bc159eee9eb0141bc239df5318a2f12f45e3aa9b872ea6897133c6102205c3a021d6033579a9c92d181258ba23878641be20e6471c18f67408b64c39872007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cee8835ea000004030047304502200bea369a6a98e08ab47b48fe7c38312f9b720cbb0a64043a582a6bdf4106d593022100c654b0ad2d6b4a27f335049d4ab05729781dec3d0be7632677e13dd98120af8c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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