magnostar.com

Issued by R3

About this certificate

This digital certificate with serial number 04:2f:1c:f1:71:4e:24:d3:9b:2a:40:e2:bc:7f:70:3e:8b:f8 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magnostar.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2f:1c:f1:71:4e:24:d3:9b:2a:40:e2:bc:7f:70:3e:8b:f8
Serial Number (int): 364480886997853458072373113956802228030456
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 40:f1:56:37:f8:f9:a4:00:96:ee:e8:13:89:ec:06:7f:4d:8b:6b:f7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:57:6d:38:8a:12:ea:ba:a2:eb:2a:22:50:3d:44:a2:97:26:94:c7
Fingerprint (sha256): 21:7d:05:b9:7c:12:81:8b:5c:e0:03:0b:42:b2:b1:ed:67:98:6b:8f:58:4f:f9:ee:11:df:c9:2d:e2:29:c0:48

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate magnostar.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magnostar.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baseboxing.com
celestialsalves.com
epicdognames.com
extrememodels.com
grandrapidsstemcell.com
liquifiedvr.com
magnostar.com
patriotsfair.com
pinkchicnation.com
samadgames.com
supervisioni.com
tresstacular.com
www.baseboxing.com
www.celestialsalves.com
www.epicdognames.com
www.extrememodels.com
www.grandrapidsstemcell.com
www.liquifiedvr.com
www.magnostar.com
www.patriotsfair.com
www.pinkchicnation.com
www.samadgames.com
www.supervisioni.com
www.tresstacular.com
www.xn--5dbim8cl.com
www.xn--7dbmuoo.com
www.xn--jebqf.com
xn--5dbim8cl.com
xn--7dbmuoo.com
xn--jebqf.com

Other certificates including the domain name magnostar.com

(limited to 100 certificates)
magnostar.com

Certificate

The complete raw certificate details for magnostar.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksifk2wJA6EnMLqLbcSL
ehnR+BzWhcsE86c0Mx7ChlEUe7GVoEJMDowkO+hLgWDGQTxF159afp6G6tObUa68
DLNZh1WQV2HH1spRLlec8KI0gi2NGpE6hoUd40UH3KD9FDd4ufl2pSq4BLJSQItA
vrhb9asOJFNrC8s8B/KthF06MGSN+Utb4gPtEeMt0JPB2R2jibbXOcpR2zcToFQQ
eKP2PUEYf4TMjCiAxtfw8Ypz8GefxQjUZGJ4YC1yKS09DEBwlFlsZUSgZlG6RQAY
fkccpgoJ1jps6h0h0X3XBUrDwdRBCJB3uzm78iyupEeVb8mo4hnhSIRdDvZPE+VV
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364480886997853458072373113956802228030456
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 18:16:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 18:16:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magnostar.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18529723582802976007225904835382618966121366854728337614569276562506435890931912006285645962821537372313936588876687274104032587300578442525745053711353191037491403615918600529550853553499079449784945196147167868304067230642224101798799154121233191346150713660270282075337720477934636871708672487003110633266855693535091690440089353885256603847122247415437253546199874313136535606502179709470083130602092495500591627969632780581319871498292346030933751538849822166197533841812524242513226553142977211384229357601170437461353417513641892051465568939940950355890791849634711847013405388229041506547851240704373940377049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40f15637f8f9a40096eee81389ec067f4d8b6bf7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseboxing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celestialsalves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicdognames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extrememodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandrapidsstemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquifiedvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnostar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patriotsfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinkchicnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samadgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supervisioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tresstacular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseboxing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celestialsalves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicdognames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extrememodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandrapidsstemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liquifiedvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnostar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patriotsfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinkchicnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samadgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supervisioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tresstacular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--5dbim8cl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--7dbmuoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--jebqf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--5dbim8cl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--7dbmuoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--jebqf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018950aeeedc000004030047304502207319ad550f05b9c1ebd51afc2a606df9111cd2b992401aa374c3d9df35a974480221009bc5d3813bcb77120753eecfa3ab7f7435519f261a4c8da8320abe31a919103b007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018950aeeee600000403004730450220189894a9aa3d15b9d627aa7cbe9e57199dcd7ff430f3189151cad7114d70bdac022100c417501b8ef3579b9f075363f87ac9fc1e82dd5a8c660357defad5e837cc09d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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