highcottonbluegrass.net.comprensa.com

Issued by R3

About this certificate

This digital certificate with serial number 03:95:4c:e3:07:a7:b2:0d:86:c3:3f:54:c2:96:1c:d4:64:e9 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=highcottonbluegrass.net.comprensa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:4c:e3:07:a7:b2:0d:86:c3:3f:54:c2:96:1c:d4:64:e9
Serial Number (int): 312141130600830187057753359817522608891113
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:22:85:11:4f:65:6b:0c:8c:51:27:1b:ae:7a:15:8e:d5:ea:da:ef
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fc:2b:c8:5c:b3:b7:a3:dc:c3:e9:af:84:b4:41:41:b6:8e:f2:36:a8
Fingerprint (sha256): 3a:88:da:c2:b1:68:85:67:8c:0c:d5:fd:c4:03:bf:1b:51:e0:1d:2f:49:2e:71:2b:16:cb:00:a8:80:d9:3c:85

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate highcottonbluegrass.net.comprensa.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for highcottonbluegrass.net.comprensa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

angelinabeer.com
baseball4vip.com.buildingelectrification.com.nevadawebdesigner.com
eroticaudiobook.com
highcottonbluegrass.net.comprensa.com
hockeynets.net
kidmozart.com
lgbtqboxing.com
live.neighborhoodchurch.com
lrnchurch.org.spectaculhair.com
nazares.com
squirtmilf.com
tikaer.com
tw-usa.com

Other certificates including the domain name comprensa.com

(limited to 100 certificates)
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
alexjonesexposed.org.cashafrica.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
bereanbaptistportcharlotte.org
powerbilt.golf
highcottonbluegrass.net.comprensa.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com
sni40633.cloudflaressl.com

Certificate

The complete raw certificate details for highcottonbluegrass.net.comprensa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqvlzQdLNdiEfALoPLW5
G7yMAPdVGx12QOiPPiv6AmQcwaXgMFXmZZHR8pCb3nt1dYmjWPxkhn3EZ+kXhT1y
JMwxsy+kWBF35+vrwJz86YCeDDAMs/5nBjRqM4H/s4HKcVeuEK/Iw6sXW89Ihqyc
t14eIjzlqDxzK4VQl9ofjOJYY4QUynlQrUhR5tlz+U2jWdM541S/Avf1SRL5XLau
G1T7Hg8BsDv+5YPFbNFxc0dfmRKWMssVFe/oeaoLfbB9JvyWw9fecS95ydX4IKWa
0I+levDZL+a6Hz7g+Eh0ew8zesE3cCWFCuWj/ayFESOLCN9Bq8/TXGij+sY6Rd1x
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312141130600830187057753359817522608891113
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 14:19:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 14:19:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'highcottonbluegrass.net.comprensa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24574997058699623754409152482132177486289797094436909819039616156689444538235269136129432556472401553265795287681320466337640316765847560369641074059642828935842097160404330259793051258804591652106646902659485292670697065624205169906017173600931830758281996269050949700716108033428450950823872698872739835841400590820134372276103652619892180683132964021395988928528421621845536705055459208349128436061093570098276425251246858064983455474478980858722495796550830344001119810226687891001817371292632117491132615035035218345089130786572097002180425119062590289849024579383043266555531952493483946315433086903059591557489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b2285114f656b0c8c51271bae7a158ed5eadaef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (313 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelinabeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseball4vip.com.buildingelectrification.com.nevadawebdesigner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eroticaudiobook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highcottonbluegrass.net.comprensa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeynets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidmozart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqboxing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.neighborhoodchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrnchurch.org.spectaculhair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nazares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squirtmilf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tikaer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw-usa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cb102ba060000040300483046022100d8d94603cef7cd67e31a8260aed6fa45193d78733d735af8679712efb38c6fca022100d2e2323c8204776bc6d67e9a189c956c97a8540187d6c72c9cc8468294e1592b0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cb102ba0d000004030047304502205ae8a4c6f4f3b23aada779c0e7f92ee0221855bf727cfef150da871676f78ab1022100f3e5a023e097953f590c80f8a73d4df5d43641ac238fde043ed901c20a29cb0b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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