shaperia.com

Issued by R3

About this certificate

This digital certificate with serial number 04:70:fd:8b:29:1a:09:c5:e9:82:ec:d9:f6:e8:17:ac:12:ab was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shaperia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:70:fd:8b:29:1a:09:c5:e9:82:ec:d9:f6:e8:17:ac:12:ab
Serial Number (int): 386897786068024765152569333496513926271659
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 55:4a:8f:c3:bc:1b:9e:e6:c3:5c:09:28:55:2c:b2:d4:1f:47:b9:74
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4d:45:6b:13:cc:af:bf:49:6a:6c:62:b5:09:7a:c1:38:05:74:d3:b7
Fingerprint (sha256): 2f:6b:26:56:fa:de:80:d3:5b:c7:1a:cb:dd:ea:e4:88:e4:c0:dc:19:ac:2e:42:8b:1d:80:72:69:82:d6:33:dd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shaperia.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shaperia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

90daygratitudejournal.com
attackwatcher.com
bankruptcyschool.com
eroticlit.com
extravagant.com
healthyhomecheckover.com
heatdemand.com
joinredbeard.com
mywellness.in
nationalchristianhomeschoolleader.com
nationalhomeschoolconference.com
playmapes.com
ruffshoe.com
runclassic.com
sculpit.run
shaperia.com
strongleadership.co
texnetsys.net
uscountry.com
webchannelapp.com
www.myacordova.com

Other certificates including the domain name shaperia.com

(limited to 100 certificates)
shaperia.com
shaperia.com
canibuild.uk
shaperia.com
recycledlifepo4.com.ojj.co.in.w3sp.global
shaperia.com
ludwigvonmises.org
doktorapotheke24.de
shaperia.com
teamds.org
shaperia.com
shaperia.com
shaperia.com

Certificate

The complete raw certificate details for shaperia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tD7iiZ/YD6a4fCrMCZL
uI8CH2Uzx3Jp3UaCaOT8/boHQxw11h7maLyVL8UmqNT+lq5SAn2b2s+sIkkruokk
TLj21xNqVs0I2srsNJlnuaecVF8iufFCjCM/2O+e/FQgJ5s6FPH+ZpZBgHTaNWLH
9PadqZ6ZwPoKm8n7cTVzpvzasnImViQR6fZKYhWtDMdy3LjBWoNOUAsAfssO4vqq
RBqLoavZUhcTKpe6X7uwb8Ybk2whyR6aRO3sbYLZU4m2tIrDBGGdis/eFKzo4T1M
TCIcGIr0Qc5mF3BbSPVUchEvQrPgAhOOMAD+FSljsCFPpQjkfTr1jVRJMNCAFA+C
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386897786068024765152569333496513926271659
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 22:51:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 22:51:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shaperia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27118050412179158791936979775308725474802523967471240680571663809241739974972320521756450812671525951852409895874735186542873463814893127805818934031818687453749833416406820276731705462684104989747909498456850842947055474348438871956202874108469706701292474277932513285198006512320408800849221677808429171228253296303466620528383530898495260302208222008637705392299938582576772863327273099573246672846651791181415470816403197989619470671766396244767348866968481543075378202054855450871756356041874922400337696595395208658980214372041115017389620818325827144044841502478585353499165591788882929296784814372418906718887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							554a8fc3bc1b9ee6c35c0928552cb2d41f47b974
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (414 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '90daygratitudejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attackwatcher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankruptcyschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eroticlit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extravagant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomecheckover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heatdemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinredbeard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywellness.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalchristianhomeschoolleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalhomeschoolconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playmapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruffshoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runclassic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaperia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strongleadership.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texnetsys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webchannelapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myacordova.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dbea22fb0000004030048304602210084a83767f27fa3c0840cde5d7513f716736cbb2c9e3138c97509b18e28777d63022100f33b952bcf28bcf5571d8950bfe5e46c716aa3ab7d923b9fb28bc8dda8e9ab030076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dbea22fb20000040300473045022100f16a493ccfd1709e70850cc6cf237030a8217e2eea4cfe1aa65eeb9d617a8687022056c1497fb43dcba92fd3d0203e27b6f2c2bdf7ec160f7585c640fbd23c093566
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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