h1920.com
Issued by R3
About this certificate
This digital certificate with serial number 03:81:7a:82:2e:e1:d2:2b:12:97:95:2e:b6:b7:8b:61:15:b7 was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=h1920.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:81:7a:82:2e:e1:d2:2b:12:97:95:2e:b6:b7:8b:61:15:b7Serial Number (int): 305396124893041393248090842422824520455607
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f2:bd:63:31:97:ad:56:5a:28:57:cc:b9:20:18:c5:24:7c:bd:f3:ec
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 63:a9:20:f6:98:2a:63:c0:ce:04:51:a8:40:d8:05:97:ab:91:6b:cc
Fingerprint (sha256): 2e:ad:fa:82:6e:0c:55:d4:86:5d:bb:ab:d1:6b:70:d9:08:fc:a8:3d:92:16:fc:50:9c:25:b8:ba:d0:90:03:01
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate h1920.com
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for h1920.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
atruewitness.com.pacifi.st
cufflinksavenue.com
czechvip.eu
eqeqe.com.texaskneepain.com
h1920.com
intent.vc.namingcreator.com
thesmileshackcompany.com.goodhempmilk.com
cufflinksavenue.com
czechvip.eu
eqeqe.com.texaskneepain.com
h1920.com
intent.vc.namingcreator.com
thesmileshackcompany.com.goodhempmilk.com
Other certificates including the domain name h1920.com
(limited to 100 certificates)
olympia.ac
bible.bible
bungalohomes.org
34755625397.ca
travel-ready.life
sidney.work
flanaganinstitute.ie
h1920.com
h1920.com
transfermarket.de
spiritualhemp.com.h1920.com
flanaganinstitute.ie
healthchoices.org
transfermarket.de
rent.limited
transfermarket.de
olympia.ac
shipwrecks.site
checkout.vc
theotgap.bible
theotgap.bible
westgarden.life
transfermarket.de
h1920.com
h1920.com
homeschoolingaroundtheworld.org
trailerskirts.ca
olympia.ac
h1920.com
trailerskirts.ca
transfermarket.de
flanaganinstitute.ie
marsexpress.ca
originalekaufen.nl.recoverymasters.com.clearword.bible
travel-ready.life
transfermarket.de
ziplink.org
umidigitalfaith.org
instituteforbiblereading.bible
sidney.work
geta.bible
olympia.ac
series.bible
breakthrough.bible
theotgap.bible
bible.bible
bungalohomes.org
34755625397.ca
travel-ready.life
sidney.work
flanaganinstitute.ie
h1920.com
h1920.com
transfermarket.de
spiritualhemp.com.h1920.com
flanaganinstitute.ie
healthchoices.org
transfermarket.de
rent.limited
transfermarket.de
olympia.ac
shipwrecks.site
checkout.vc
theotgap.bible
theotgap.bible
westgarden.life
transfermarket.de
h1920.com
h1920.com
homeschoolingaroundtheworld.org
trailerskirts.ca
olympia.ac
h1920.com
trailerskirts.ca
transfermarket.de
flanaganinstitute.ie
marsexpress.ca
originalekaufen.nl.recoverymasters.com.clearword.bible
travel-ready.life
transfermarket.de
ziplink.org
umidigitalfaith.org
instituteforbiblereading.bible
sidney.work
geta.bible
olympia.ac
series.bible
breakthrough.bible
theotgap.bible
Certificate
The complete raw certificate details for h1920.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgISA4F6gi7h0isSl5UutreLYRW3MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MTYwODE1NTVaFw0yMzEyMTUwODE1NTRaMBQxEjAQBgNVBAMT CWgxOTIwLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK7jX2zA LKz28AyGgB5Jr1+bZMAhro69AsCskAh/pfkwhKhZ8W94zJ4GgowvY12nVjr8fCsj fpIdzcAbxQPjfHNXThYLtbe42ZXfEpgt0DUBD7x1xnWrs9nXTGKJN83qpUwmaj2Y H6PBOwYCHxRrv2u5kBjF2gxxM8d5eXWvLzkejkVBI8HhdxDLwGgHmbq4jhdZj3ze OpE5KeAlUQbOlfJS7AvjjTViPL5UM9fz95NEKE+8hGm6nz/Zsp2f5oWI/Wq5hsPM MPPXWaKlfu+SfcJFCp9aLvEDtx1SB85YahUU/UngrLtEi7pEOT4NusZoBTCtxJ1h Amoe90GeGJ9q+xsCAwEAAaOCArEwggKtMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU 8r1jMZetVlooV8y5IBjFJHy98+wwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wgbkG A1UdEQSBsTCBroIaYXRydWV3aXRuZXNzLmNvbS5wYWNpZmkuc3SCE2N1ZmZsaW5r c2F2ZW51ZS5jb22CC2N6ZWNodmlwLmV1ghtlcWVxZS5jb20udGV4YXNrbmVlcGFp bi5jb22CCWgxOTIwLmNvbYIbaW50ZW50LnZjLm5hbWluZ2NyZWF0b3IuY29tgil0 aGVzbWlsZXNoYWNrY29tcGFueS5jb20uZ29vZGhlbXBtaWxrLmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ALc++yTfnE26 dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABip1GeAkAAAQDAEcwRQIgZUVj+i/J 3exVY7Jvpq/0D37UctJeYmjJz60uWXH3d/8CIQCohv2GmjfZnoV2k6RPM+5YXi3w uyHViBAtVhIRHeYpvQB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutS AAABip1GeA8AAAQDAEcwRQIgKj2tZ+/ZAKTgnLgfUsftxVFR+BvQAgbHfoqNVe+0 M2oCIQDpvj+hQideW8leQt7OAOSbehbLivtJRkK8x2Ttx6112zANBgkqhkiG9w0B AQsFAAOCAQEAWcx1g7kQ7sjf2GkC8xDNeSKffPkhjggTzQXKckt+Xr43IaGfVyTA 1tznF4I/Ocm0Sbal1bboSHUrQJyjRttCqLlM4IvEBoPNKhKj8klDuJJoPhAPi4VM CYvtRVPYHY/gkxZmAce+NHcWN+N94Q4oaHr3witjXjbSv+GWd5M1stG2y8JHgDeL p/god99ahxaeedUjLWnUTz5CSadJfFOxvsPWiZNXPgHZCe5p01dUgU91hvAwoohs gttdkU1vLIW91hgZkLPjTAO8RFXbQgqleArdLjSePiDXAfM1AFe1JhG/cc0w5Pl7 19wyNbQEY2bcy05cSu+uyYKbKnHXJZr5sQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruNfbMAsrPbwDIaAHkmv X5tkwCGujr0CwKyQCH+l+TCEqFnxb3jMngaCjC9jXadWOvx8KyN+kh3NwBvFA+N8 c1dOFgu1t7jZld8SmC3QNQEPvHXGdauz2ddMYok3zeqlTCZqPZgfo8E7BgIfFGu/ a7mQGMXaDHEzx3l5da8vOR6ORUEjweF3EMvAaAeZuriOF1mPfN46kTkp4CVRBs6V 8lLsC+ONNWI8vlQz1/P3k0QoT7yEabqfP9mynZ/mhYj9armGw8ww89dZoqV+75J9 wkUKn1ou8QO3HVIHzlhqFRT9SeCsu0SLukQ5Pg26xmgFMK3EnWECah73QZ4Yn2r7 GwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 305396124893041393248090842422824520455607 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 08:15:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 08:15:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'h1920.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22077586747506664001414249973565994350388213186820227794173119026385551691226379024662100813022043575970210792366629793807475844881877104104010477392252153200314146450788050781640296663675895014462467920067393472527259850371021022774725992049996364108423598215928074325976863058410782879667753199272635815621988635040737665789563063575738386894947025020322947095794299710627441089633001692060314531731260898880946773979389843940039226998065323023364213683854177232367324969091819846350498275358541911980405573530349223774905346969242203609929740765336861739322195257611646667551959222760437355123138320447330130262811 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f2bd633197ad565a2857ccb92018c5247cbdf3ec . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (177 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atruewitness.com.pacifi.st' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cufflinksavenue.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czechvip.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eqeqe.com.texaskneepain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h1920.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intent.vc.namingcreator.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesmileshackcompany.com.goodhempmilk.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a9d46780900000403004730450220654563fa2fc9ddec5563b26fa6aff40f7ed472d25e6268c9cfad2e5971f777ff022100a886fd869a37d99e857693a44f33ee585e2df0bb21d588102d5612111de629bd0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a9d46780f000004030047304502202a3dad67efd900a4e09cb81f52c7edc55151f81bd00206c77e8a8d55efb4336a022100e9be3fa142275e5bc95e42dece00e49b7a16cb8afb494642bcc764edc7ad75db . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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