mortgageloansconnecticut.com.villarenters.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:eb:78:18:d7:b3:6f:f8:e0:5d:a5:97:13:2c:cc:66:6e:6f was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mortgageloansconnecticut.com.villarenters.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:eb:78:18:d7:b3:6f:f8:e0:5d:a5:97:13:2c:cc:66:6e:6f
Serial Number (int): 341462850371254633178769735530252616494703
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:69:7e:af:33:18:b0:80:b6:1a:05:15:5f:f1:52:bc:eb:d1:b8:a0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9d:77:80:7b:dd:18:e6:af:7a:bb:8d:30:67:9d:66:49:48:80:33:8f
Fingerprint (sha256): 33:9f:1f:af:09:aa:dc:f5:e1:b1:40:59:26:ec:3d:69:b9:c7:fd:fd:a7:0e:a6:43:58:22:cf:59:86:78:43:ef

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mortgageloansconnecticut.com.villarenters.co.za

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mortgageloansconnecticut.com.villarenters.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flyovercarpet.com
gonewildhemp.com
keepkidsfirst.net
lessbras.com.588.cool
massagecontacts.com
merchantscardsolutions.com
michaelgilmourblog.com
mortgageloansconnecticut.com.villarenters.co.za
palestinedonations.com
resume.irvinglopez.xyz.3wheelerads.com
weddingproart.com.pariano.com
whitwell.net
www.onlinepharmacyaustralia.com

Other certificates including the domain name villarenters.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for mortgageloansconnecticut.com.villarenters.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHMh1qDSGYuaHGcUz7mC
6jIi24yQidW/k9tlUdqbQxy4HsC6jK4hKKs4vnhUPTMZrVY6aRHKkp8ldC9UdGKe
NLCUXO1gLjkBWEQz1uF57tNFhLL4VNIsnSrfr7tDWUyxfm/HeKOF8Qm8HkZb8KMt
YGg3HRv+eVi7a/WByb3sKwLGxRczHuvKghm8JBmG/ymgdOcgetX9fQajZzd/tXCA
E73t4JeqMGbLInOSywuZVEMOSkDBk6ooyxH27Dbbd41XOy0W+dzV+0ZhMHrPJZ7e
mdnGEPNZVcCHLh0HsXC7gXrhvy5+8tDLdhGs1CkXjIEG+ICSQAsmviup5dy/KzK1
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341462850371254633178769735530252616494703
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 12:50:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 12:50:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mortgageloansconnecticut.com.villarenters.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23789575128165187408920711744913473853709479886860256418182783800619023292728037692198568862594808241467135736141344523622991431902127780811723029931609107752539030510252783905229689510349862621862424567943763624052403264350824645028323391976007239155716585257397637702404045316044667652031321735689307412564103203719089695367929470937519522189073691163096988301144534922053694133067183871328733062049117083712381134062631422713058047891715095494469058394959414491935433498565722418566159643869622552832449871432508402037438897810685011749411511095359887688182878235379245910780629025916094923128861209248050179126699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24697eaf3318b080b61a05155ff152bcebd1b8a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (347 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyovercarpet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonewildhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keepkidsfirst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessbras.com.588.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massagecontacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merchantscardsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelgilmourblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgageloansconnecticut.com.villarenters.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palestinedonations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resume.irvinglopez.xyz.3wheelerads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddingproart.com.pariano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitwell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinepharmacyaustralia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c0be4f3470000040300473045022100a57272e85b89ed2a0590c6c226ca68f7a255388a79e12a72da0902791dd353cb022074d778d8dfbcaa86c14a2353b2144a008bddb0ab5a90588765b3e6b255993cd4007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c0be4f2eb000004030047304502210086f5bc563ae48ec2e9bbc79804ef1474e09fbc2e09f74f5cc18bf95cce608eaa02206974444d2e65d27b5e075fa9efda207a0e832d195bebbfad38b4f36c75ae968c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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