email.media

Issued by R3

About this certificate

This digital certificate with serial number 04:04:74:d1:aa:03:ed:36:c9:66:7e:8c:36:6c:d0:d6:77:63 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=email.media

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:04:74:d1:aa:03:ed:36:c9:66:7e:8c:36:6c:d0:d6:77:63
Serial Number (int): 349965552280599955749315333663163174778723
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8f:a9:68:20:4d:a6:e6:80:07:bc:3a:7a:28:c3:16:5c:76:1d:9b:91
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 79:8b:e8:c4:e1:3f:c6:69:92:2a:38:59:b8:d2:7b:90:31:a3:7e:93
Fingerprint (sha256): 20:72:a7:3a:93:55:18:cd:08:77:45:b9:cc:35:50:97:76:f1:e0:7b:ff:d3:5c:2f:73:52:51:a4:44:75:11:e7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate email.media

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for email.media

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

email.media
www.email.media

Other certificates including the domain name email.media

(limited to 100 certificates)
email.media
email.media
email.media
www.naturhemp.com
email.media

Certificate

The complete raw certificate details for email.media in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349965552280599955749315333663163174778723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 23:05:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 23:05:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'email.media'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769601129611214385893656878974963074659378577612337925354633561924399884533976427136713497857733176468343903697988205884717934109291139365244001769988905846579097983753534237754308238110015875017066147872946630278810978619297478785399342612761815551720279584634274397551189730751963578963130230582549584277160075892771230778356043921998135232228598518746002044497069104207183873710181949722391762245217666940053354047379880538847573920616013201900998274061765980050808363231958591078845615785701809992043379400827495289647244414287126869798134226603965121334239242130436608665306280395907961654992679985036332677633528288180325784164400937330889402915516443058429979189613570652244395221079855292449688710120680088341590429661187926966279487079039679024287833789424090648897415496255653540831333452536974629042429043841377903978387702385362314877729635869939315359836509396434961372527965176139463694742790743054843613911187802156508936968793556289962313831890987948909046521618852908605387905733206939621306073794358635489464112745459788250012492479146306710339355042802089483065701346200150287556499726062508326727473525060075520635573486115678172115526611698808320654425283503515534722329269692213660693316624267455974660290416751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8fa968204da6e68007bc3a7a28c3165c761d9b91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.email.media'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f317874d800000403004830460221008c9bb7ccb03280751ab012986fcb5bbf4c71149883beb5d8090d1958b88ab367022100e856eba02db67f7e5c3ccac16f47e9506838944f3edc270172e42eae6cdc59c200760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f317874dd00000403004730450220236c85aed750bd50813650c7f6534030d72076efd9b35598bee153d99a85b003022100ce18766e891a8c02884ff46f542b731767477992743f20e23b5e8b3f90f12be2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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