enkoresign.org
Issued by R3
About this certificate
This digital certificate with serial number 04:29:b1:95:50:84:29:e7:e7:93:bf:2d:1d:39:52:1c:d5:07 was issued on by Let's Encrypt.
With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=enkoresign.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:29:b1:95:50:84:29:e7:e7:93:bf:2d:1d:39:52:1c:d5:07Serial Number (int): 362636769411349170372190219034431370089735
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: fa:c0:ed:50:2a:05:a9:16:f3:ae:f2:9a:97:1b:a0:54:60:99:40:8e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): a5:e7:b5:4b:04:c8:03:ad:81:4a:1f:e9:6c:54:1b:58:13:d8:79:83
Fingerprint (sha256): 2e:4e:25:52:88:67:c5:07:28:bf:a8:26:d9:09:bf:aa:6b:de:35:67:00:bf:90:62:44:c3:1a:58:43:e1:ce:9e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate enkoresign.org
17
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for enkoresign.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
closertothefire.com
deepmatch.net
enkoresign.org
etechmall.net.karelboats.com
exploiture.com.rodolfobuonocore.com
iberex.com
koimaster.com
marklevystudio.com
matternfamily.com
medicalspa.in.021labs.org
readingroadmap.com
realtorbob.us
rusticelement.com
sharethecard.com
tecnomix.com
versand-kostenlos.de.adj.co.in
wehonorchrist.org
deepmatch.net
enkoresign.org
etechmall.net.karelboats.com
exploiture.com.rodolfobuonocore.com
iberex.com
koimaster.com
marklevystudio.com
matternfamily.com
medicalspa.in.021labs.org
readingroadmap.com
realtorbob.us
rusticelement.com
sharethecard.com
tecnomix.com
versand-kostenlos.de.adj.co.in
wehonorchrist.org
Other certificates including the domain name enkoresign.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for enkoresign.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgISBCmxlVCEKefnk78tHTlSHNUHMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMDIyMzU2MDhaFw0yMzEyMzEyMzU2MDdaMBkxFzAVBgNVBAMT DmVua29yZXNpZ24ub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA 5jZqIGT/Og/5ytCifW5j7jjkMvrQOOr+7B3SeY6+2Tmy0cu2igJ/ck6OjfvF4+fB S7rTLVK8GKrF1JE/4C3jYZbX6GC1pxi57XBOvIA1Ru5YRqb+ICuh+jvojXwrhi2Q lGLZ5eQqu4roJAuVsIeFeaPho3pQg2rLarcqx5TGOufYfB7xKorrMlTkgyZTQ/BH ygGhqG48UuEplXjnQ7R77MqatQ4cRpL5C4CMUpkrheUuG2l/ak9cEb1yP17jjA8Z zXFNQ8VqXesEg4S3Y3j/sPSna+8xzVd+dFbiZA1KGkPxy3qVxVNj6tF1aqrD2qJI sG3OrrDIWgx4WCVWjUffqwIDAQABo4IDZTCCA2EwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBT6wO1QKgWpFvOu8pqXG6BUYJlAjjAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzCCAWoGA1UdEQSCAWEwggFdghNjbG9zZXJ0b3RoZWZpcmUuY29tgg1kZWVwbWF0 Y2gubmV0gg5lbmtvcmVzaWduLm9yZ4IcZXRlY2htYWxsLm5ldC5rYXJlbGJvYXRz LmNvbYIjZXhwbG9pdHVyZS5jb20ucm9kb2xmb2J1b25vY29yZS5jb22CCmliZXJl eC5jb22CDWtvaW1hc3Rlci5jb22CEm1hcmtsZXZ5c3R1ZGlvLmNvbYIRbWF0dGVy bmZhbWlseS5jb22CGW1lZGljYWxzcGEuaW4uMDIxbGFicy5vcmeCEnJlYWRpbmdy b2FkbWFwLmNvbYINcmVhbHRvcmJvYi51c4IRcnVzdGljZWxlbWVudC5jb22CEHNo YXJldGhlY2FyZC5jb22CDHRlY25vbWl4LmNvbYIedmVyc2FuZC1rb3N0ZW5sb3Mu ZGUuYWRqLmNvLmlughF3ZWhvbm9yY2hyaXN0Lm9yZzATBgNVHSAEDDAKMAgGBmeB DAECATCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3ALc++yTfnE26dfI5xbpY9Gxd /ELPep81xJ4dCYEl7bSZAAABivMJA8MAAAQDAEgwRgIhAN3d+vsfZBhF26KJLSsk Pn2cjxmqHuFbESO7PmcygTnEAiEA7XxwUA9IOKW0mHAIcLXCIMwRvMeTmrm5ND1d 2jKhgX4AdwDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYrzCQPO AAAEAwBIMEYCIQCLJWb4huirayW/M5crXpBdGpHWpbBf3YoTGcfvXSDR7AIhANAT nKpbyoI/f7cgqd7DWnsqIWNul1sTyDF6qj26oByhMA0GCSqGSIb3DQEBCwUAA4IB AQCUoCGJqP+UVN7z2obDJNpxBO1BLWgHiU5v3tnmQ9xTSZVolHlq0NGL7doN6Apa f4L8O+Cv1Q4E1urMwaGvc5NXuFbf0SiQjLw9IHYRFMWrwdId6ZWs1xeSkOuZY6iz r5pp2YGHrsF4F/BXny8HBwOZPDMsa5VXG0/FWqlQ4d/jqyAvNh/MK+vZVEnRl1yt EE30xn5HyHAfj9Vw64kdIX16B/kmpVukurkt6WX5cWYZNptL8asKhfOkg5QSKwYu OjM2ibQoCkwrbEaOPh5a6ttfmZhlAVAzN+LubJiyj1e3+LMNUB33qeJHD5auDNHM gtHLqPI7/JGMmBHYdQojD+a4 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jZqIGT/Og/5ytCifW5j 7jjkMvrQOOr+7B3SeY6+2Tmy0cu2igJ/ck6OjfvF4+fBS7rTLVK8GKrF1JE/4C3j YZbX6GC1pxi57XBOvIA1Ru5YRqb+ICuh+jvojXwrhi2QlGLZ5eQqu4roJAuVsIeF eaPho3pQg2rLarcqx5TGOufYfB7xKorrMlTkgyZTQ/BHygGhqG48UuEplXjnQ7R7 7MqatQ4cRpL5C4CMUpkrheUuG2l/ak9cEb1yP17jjA8ZzXFNQ8VqXesEg4S3Y3j/ sPSna+8xzVd+dFbiZA1KGkPxy3qVxVNj6tF1aqrD2qJIsG3OrrDIWgx4WCVWjUff qwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 362636769411349170372190219034431370089735 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 23:56:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 23:56:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'enkoresign.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29061642960224948422188166609664658711926214157876892419450908507323635897609010456783943204348789332024924975431562911667078964127741669306358265109822099940783504875015974714657340771663795415536176071309101975262601246817405279068647900095016239512280917342907631136787415161344343689173799274782969745222868770286793295922530717925508009904264041085633720863661644340623148267696529218746780661513610782831634426698193367454210744552500020909097556854375283205782909940930584034523606842052258134285910178692246302281452056216314651836142654336520163469730107801593452196344059121613995421619389259021914863034283 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fac0ed502a05a916f3aef29a971ba0546099408e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (353 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'closertothefire.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepmatch.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enkoresign.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etechmall.net.karelboats.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploiture.com.rodolfobuonocore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iberex.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koimaster.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marklevystudio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matternfamily.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicalspa.in.021labs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readingroadmap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtorbob.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rusticelement.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharethecard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnomix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versand-kostenlos.de.adj.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wehonorchrist.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018af30903c30000040300483046022100ddddfafb1f641845dba2892d2b243e7d9c8f19aa1ee15b1123bb3e67328139c4022100ed7c70500f4838a5b498700870b5c220cc11bcc7939ab9b9343d5dda32a1817e007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018af30903ce00000403004830460221008b2566f886e8ab6b25bf33972b5e905d1a91d6a5b05fdd8a1319c7ef5d20d1ec022100d0139caa5bca823f7fb720a9dec35a7b2a21636e975b13c8317aaa3dbaa01ca1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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