31285.com
Issued by R3
About this certificate
This digital certificate with serial number 04:6a:b3:c1:d9:e1:5a:3f:dd:9e:e4:78:d1:de:38:59:f7:75 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=31285.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:6a:b3:c1:d9:e1:5a:3f:dd:9e:e4:78:d1:de:38:59:f7:75Serial Number (int): 384758012964336812294501950397431867373429
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: f6:05:32:c0:9d:8f:7a:48:5e:93:54:4b:99:fa:f9:85:7b:f7:fb:2e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 8c:b1:42:c7:cb:d1:68:4d:58:bb:43:4d:9d:71:b1:99:1e:19:98:04
Fingerprint (sha256): 3b:b5:34:b9:f0:40:0f:36:3d:a4:20:e0:f0:b6:d4:67:de:81:ba:cf:59:c7:fb:43:04:22:31:22:f7:23:da:57
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate 31285.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 31285.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
31285.com
Other certificates including the domain name 31285.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for 31285.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISBGqzwdnhWj/dnuR40d44Wfd1MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMjYxOTIxMDZaFw0yNDAzMjUxOTIxMDVaMBQxEjAQBgNVBAMT CTMxMjg1LmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL57/5lp YGypi/e6xg9fJ9sSKxw0yx4vqD24m17d81rVyB879IHLib98ANNqk3eCbLDF8xJL d0QH5+WnGt3Shyh6ocV7HuB4hvEqb0aSvncZIEltrLLlN9G0BLcsj5ZiyB9FukYn JxU15lI7k/l7SYGvvfY6G9MpUxyNf2lb9f8FNYj8TQi+BcJvjmfBNDE9gHQDsER8 HNcpQELiKXBz9V9p8z9YxCVRVbC5tuvFO5NHOUEGVtaSyrFcd0oLndBAJqs+aEbp CXruxYKnPVqdJXHByFiyBWgOAa0SFrb3FL0Yqx27acDafH0SzrqAEK6PqWvdTjR9 c1q+QhX3/W9m6lkXGkZSUgDm6NUp2ILCWwHeRO58iP/hV/K1n+lJZCpQ64kV4B90 njjD/n+Wg/Cj5Pk32slVh9GsjVm790cWd56bCe+T8vAYvcdTjUFU4hIA+k6m+WoB /URmqCYooRwZIrAszHs3R06HkQW8De4tZja5tHirRvb3undSyA1FrSVilrIHCB5B 7+P1rVck1QTCdrdGQYAgrNTrbSMz/88GDQCjG66bnYkRPGdbUfHrb3i8c542CsAx BJHerytM0VRj2MUBfbuPa4n6CsJNQAXA6PlxcPpIuJa8AdCMOpI/2n9FQSM40cgW GC6cZ461P2121R6tqfBu0aIYok4DcWY5s32XAgMBAAGjggILMIICBzAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFPYFMsCdj3pIXpNUS5n6+YV79/suMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMBQGA1UdEQQNMAuCCTMxMjg1LmNvbTATBgNVHSAEDDAKMAgG BmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3AKLiv9Ye3i8vB6DWTm03 p9xlQ7DGtS6i2reK+Jpt9RfYAAABjKfJwLoAAAQDAEgwRgIhANQZ3XCECAJ8XXak lXB/NPhIfKRo7RRuDjYFdUDJA9QYAiEA7mEunwZd72fVtKFidn6cT4d7PIwlNEa0 bgYWKQHhofIAdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYyn ycC7AAAEAwBGMEQCIBj4OGhmgHbbc+ZcO08dOaSDyATcprkK7ARTRo+vkemwAiAH qMkmiAGiLe2JtS2PskEiHH1joahM6mpApYCi8NUaLjANBgkqhkiG9w0BAQsFAAOC AQEAAPO3yLoNvC/GAWsg3TkKFMU+iYZ7kMThHozgiowjcdZlKePJz0KxYFN1NfM1 2BZJuTgG4FtN7eSxFNAWibHzc+ExlYnpn509XmYAOp4ySkasyS+PyTWGY3oPebvH QHHDdzwbCogiKYPOwcK1y0GkVrmW7A+ZeLCcQUtGSbiU+ri1k8z/4aR361hK+A2O jWC43HJYuJxuCuyv2thIkhHB7ZNpGH53PuG3rHLLC1wm5FgCVWnnAVrRDGN8T364 3h0bbkyLqQ5Qsx2eZznYXuKhsQye0uWby2PjudXmIzPvTLq4NSAB9aLDQT3rtbED eG8nX38m8MiIrEMWOCtCGIc/cA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvnv/mWlgbKmL97rGD18n 2xIrHDTLHi+oPbibXt3zWtXIHzv0gcuJv3wA02qTd4JssMXzEkt3RAfn5aca3dKH KHqhxXse4HiG8SpvRpK+dxkgSW2ssuU30bQEtyyPlmLIH0W6RicnFTXmUjuT+XtJ ga+99job0ylTHI1/aVv1/wU1iPxNCL4Fwm+OZ8E0MT2AdAOwRHwc1ylAQuIpcHP1 X2nzP1jEJVFVsLm268U7k0c5QQZW1pLKsVx3Sgud0EAmqz5oRukJeu7Fgqc9Wp0l ccHIWLIFaA4BrRIWtvcUvRirHbtpwNp8fRLOuoAQro+pa91ONH1zWr5CFff9b2bq WRcaRlJSAObo1SnYgsJbAd5E7nyI/+FX8rWf6UlkKlDriRXgH3SeOMP+f5aD8KPk +TfayVWH0ayNWbv3RxZ3npsJ75Py8Bi9x1ONQVTiEgD6Tqb5agH9RGaoJiihHBki sCzMezdHToeRBbwN7i1mNrm0eKtG9ve6d1LIDUWtJWKWsgcIHkHv4/WtVyTVBMJ2 t0ZBgCCs1OttIzP/zwYNAKMbrpudiRE8Z1tR8etveLxznjYKwDEEkd6vK0zRVGPY xQF9u49rifoKwk1ABcDo+XFw+ki4lrwB0Iw6kj/af0VBIzjRyBYYLpxnjrU/bXbV Hq2p8G7RohiiTgNxZjmzfZcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 384758012964336812294501950397431867373429 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 19:21:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 19:21:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '31285.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777108425573294341108755638148648938484459678897122945203558012082647930241013678087488036284894866644913498584812945079532856095669127326338421474835803212357459691951619631915636044236820492650169895989815017600935628976183607217790990422883989263409628552826013906418035684980240276331273889388152946510597253233835806261422379584146525372823884739805319749050776432486968163219083064510365782843393452954778457733238850816087799684113630688405494871936633402486356633208153423296684793095545771467245600490106111099536472338468500117440168387109031615937356368143015666299624715131754163358560330989442351792560931584135680464107680872644933334485286617121960097566914748512303027128918517348046550710760121104973723346384695508952417037728733922504048697674386104129281567200592169054402463055488077129814181202375967944985020889230325096032778773604061535199288026246757742343093462978033938376470100725164640913486535169507859167775152724716474239735895121825851586168346329787716243788463968916138935189765453778860780825879946460913328005416873274780811631285533929055503283443974722096630247742649398814187013019053551804315641604829602025681528119772949461789771291006666468682877675280805197422951077354446736625318985111 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f60532c09d8f7a485e93544b99faf9857bf7fb2e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '31285.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ca7c9c0ba0000040300483046022100d419dd708408027c5d76a495707f34f8487ca468ed146e0e36057540c903d418022100ee612e9f065def67d5b4a162767e9c4f877b3c8c253446b46e06162901e1a1f200750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ca7c9c0bb0000040300463044022018f83868668076db73e65c3b4f1d39a483c804dca6b90aec0453468faf91e9b0022007a8c9268801a22ded89b52d8fb241221c7d63a1a84cea6a40a580a2f0d51a2e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0000f3b7c8ba0dbc2fc6016b20dd390a14c53e89867b90c4e11e8ce08a8c2371d66529e3c9cf42b160537535f335d81649b93806e05b4dede4b114d01689b1f373e1319589e99f9d3d5e66003a9e324a46acc92f8fc93586637a0f79bbc74071c3773c1b0a88222983cec1c2b5cb41a456b996ec0f9978b09c414b4649b894fab8b593ccffe1a477eb584af80d8e8d60b8dc7258b89c6e0aecafdad8489211c1ed9369187e773ee1b7ac72cb0b5c26e458025569e7015ad10c637c4f7eb8de1d1b6e4c8ba90e50b31d9e6739d85ee2a1b10c9ed2e59bcb63e3b9d5e62333ef4cbab8352001f5a2c3413debb5b103786f275f7f26f0c888ac4316382b4218873f70