optimalhomeimprovement.com

Issued by R3

About this certificate

This digital certificate with serial number 04:26:2e:5b:af:75:19:3c:2e:09:a6:77:16:c9:5f:78:22:6f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=optimalhomeimprovement.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:26:2e:5b:af:75:19:3c:2e:09:a6:77:16:c9:5f:78:22:6f
Serial Number (int): 361441494215556066528984440676012650930799
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0b:0f:6c:1a:fc:6b:78:96:97:e3:c3:94:bc:2e:44:20:2e:bd:d4:49
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 71:ed:76:a6:6d:b3:67:49:18:3a:96:52:c9:a5:93:8a:63:bf:fa:79
Fingerprint (sha256): 2c:b9:2a:b2:0b:57:c0:2d:b2:95:63:c8:e2:16:ca:c7:03:d8:29:2b:eb:36:55:7e:2b:e8:42:d1:b9:2b:72:af

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate optimalhomeimprovement.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for optimalhomeimprovement.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.optimalhomeimprovement.com
optimalhomeimprovement.com

Other certificates including the domain name optimalhomeimprovement.com

(limited to 100 certificates)
optimalhomeimprovement.com
optimalhomeimprovement.com
blocksignature.com
www.optimalhomeimprovement.com

Certificate

The complete raw certificate details for optimalhomeimprovement.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISBCYuW691GTwuCaZ3FslfeCJvMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTUwMjI3NDRaFw0yNDA2MTMwMjI3NDNaMCUxIzAhBgNVBAMT
Gm9wdGltYWxob21laW1wcm92ZW1lbnQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA32Sj0qJAF5jlcpmPWD5O7jxYIEAQoLx48eOHGeZZJGlB8stE
twFDhVXWcklNj5zjRWunKZ6x9QCf6c0Yu8AaLxVnezgmRTnwuvrP90Y6Ke4gC0Jm
2Yda7+AKmtz+wG5BpNhA0PmBQcLScoKKOZ8u1dJ+SgnOHvlKOOfR2ttf6fjiE+rz
Xx1jcI9wkJDDKwDS3/BTDyHQSR1btBJlMQ07I4NnjcWYlKogBUo37AVdcSpti+PT
P6OUGYC5Nvr5kkqFhqUg/u5/2rw62ZaxifY8K+3xow4jb3rtuABqFYEWZX7ajJ9A
otSdH4LruXL/d6lXBfwoeNSBB6jn/xBqpn7i1wIDAQABo4ICODCCAjQwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBQLD2wa/Gt4lpfjw5S8LkQgLr3USTAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzBDBgNVHREEPDA6ghwqLm9wdGltYWxob21laW1wcm92ZW1l
bnQuY29tghpvcHRpbWFsaG9tZWltcHJvdmVtZW50LmNvbTATBgNVHSAEDDAKMAgG
BmeBDAECATCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1ADtTd3U+LbmAToswWwb+
QDtn2E/D9Me9AA0tcm/h+tQXAAABjkAmv0oAAAQDAEYwRAIgO3YkpfkOIQF02sdc
4xp2P4SB1xS3Ibo2j2YTv/ZyNfcCIDV2I4rMbAwgQX/K17OTZ+Q6+Hmp0GfaRIIi
lSyP7q7WAHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGOQCa/
TAAABAMARjBEAiB15TTzQkJeVxGfMV4aqiBobIP5r6KK/2XWC3lLeu2/vgIgC1UU
bdbk/2u+QzgWGHbO2roJfRdfa6axQ0uRIY3CVq0wDQYJKoZIhvcNAQELBQADggEB
AFIACiKOyyo32p7U0yNFKw3//2RJdYBVwkiTKOyhq3cAqYe1P43R24svLpSF5dFo
DmWPY9xRfVjqCpWTfJI5cmMNsJ/ISCWFyYlSkBvlCfwbVgW3EIUiZJdtuFqB41aV
K0zkbTass4Z+hPz2+KVyH+uHOWsbQHJoHPaHncNqCnKejEscXFs8rEMrklvAuFKI
yTEsIQxiHCgZ51NFG994zDDic7/+k2f1ltwUN2Tz4N5ll5XS2WFFy5h04pm4LgZj
b+ASe9xCtZLGTM4bccv/a6nY8UNi0nWoz59QnUKRESDwQ5BcbM8nU08kSD8M5AAV
FoliCJAC0ipVDEYzuzFF9Xs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32Sj0qJAF5jlcpmPWD5O
7jxYIEAQoLx48eOHGeZZJGlB8stEtwFDhVXWcklNj5zjRWunKZ6x9QCf6c0Yu8Aa
LxVnezgmRTnwuvrP90Y6Ke4gC0Jm2Yda7+AKmtz+wG5BpNhA0PmBQcLScoKKOZ8u
1dJ+SgnOHvlKOOfR2ttf6fjiE+rzXx1jcI9wkJDDKwDS3/BTDyHQSR1btBJlMQ07
I4NnjcWYlKogBUo37AVdcSpti+PTP6OUGYC5Nvr5kkqFhqUg/u5/2rw62ZaxifY8
K+3xow4jb3rtuABqFYEWZX7ajJ9AotSdH4LruXL/d6lXBfwoeNSBB6jn/xBqpn7i
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361441494215556066528984440676012650930799
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 02:27:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 02:27:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'optimalhomeimprovement.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28200769407916818604995762310775834965513768891023802763842891362681140289149863951011478975247080401915341805568088733679192972807840184887167150683602715310606300905419326778708411381548606628707990993973712250868661683235254512692040337894430604326796637588605349137702641907166267589337292208855725724907140576343600369104002012744327842131545861534207213487189116494965841102472967593751993466517292414861693787719094309530689166523175624691156825134148377828700581934352510257291124217416387528565130915479381505661154681050873766632474165590771485979118980006162578342226538125268901444991272286959698179973847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b0f6c1afc6b789697e3c394bc2e44202ebdd449
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optimalhomeimprovement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimalhomeimprovement.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e4026bf4a000004030046304402203b7624a5f90e210174dac75ce31a763f8481d714b721ba368f6613bff67235f702203576238acc6c0c20417fcad7b39367e43af879a9d067da448222952c8feeaed600750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e4026bf4c0000040300463044022075e534f342425e57119f315e1aaa20686c83f9afa28aff65d60b794b7aedbfbe02200b55146dd6e4ff6bbe4338161876cedaba097d175f6ba6b1434b91218dc256ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0052000a228ecb2a37da9ed4d323452b0dffff6449758055c2489328eca1ab7700a987b53f8dd1db8b2f2e9485e5d1680e658f63dc517d58ea0a95937c923972630db09fc8482585c98952901be509fc1b5605b710852264976db85a81e356952b4ce46d36acb3867e84fcf6f8a5721feb87396b1b4072681cf6879dc36a0a729e8c4b1c5c5b3cac432b925bc0b85288c9312c210c621c2819e753451bdf78cc30e273bffe9367f596dc143764f3e0de659795d2d96145cb9874e299b82e06636fe0127bdc42b592c64cce1b71cbff6ba9d8f14362d275a8cf9f509d42911120f043905c6ccf27534f24483f0ce40015168962089002d22a550c4633bb3145f57b