xn--ibi.tk

Issued by R3

About this certificate

This digital certificate with serial number 03:77:88:06:ff:f9:bb:91:da:99:48:8b:81:3f:91:d1:13:e8 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xn--ibi.tk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:88:06:ff:f9:bb:91:da:99:48:8b:81:3f:91:d1:13:e8
Serial Number (int): 302011270811880628280305652074340634661864
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:7e:47:2a:d0:38:c0:5e:7e:78:f5:2f:b9:af:5f:77:bf:60:59:5a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 21:2d:bd:a4:cc:88:7e:cb:6a:eb:20:0f:19:8d:1f:36:88:0e:18:f8
Fingerprint (sha256): 3d:e4:4f:35:1c:ef:a5:0b:53:8b:da:03:e6:bb:1e:fe:48:51:b1:30:13:09:7f:4a:ce:8d:3e:85:c5:e4:8c:5d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate xn--ibi.tk

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xn--ibi.tk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bluesrap.com
ckdk.com
elaproperties.com
foundaiton.app.ipauctions.com
healthyhomesystem.com
internet.lol.theselfevidentpodcast.com.americancoupdetat.com
l-v.in
microdoseshop.com
rxsymbiotics.com
tvwii.com
www.omgdubai.com
xn--ibi.tk

Other certificates including the domain name xn--ibi.tk

(limited to 100 certificates)
re.vg
goldenoldies.ca
34725625397.ca
kakinada.work
sasfoundation.org
arvada.work
xn--ibi.tk
usc.mba
leaselock.ca
kakinada.work
turntableneedle.org
xn--ibi.tk
leaselock.ca
leaselock.ca
re.vg
re.vg
leaselock.ca
re.vg
impossible.ca
xn--ibi.tk
twee.co.za
cla.bible
impossible.ca
impossible.ca
mibuffalo.com.canibuild.online
suicidetoserenity.org
farmacetica.org
fc.vc
kakinada.work
xn--ibi.tk
ebaytes.ca
impossible.ca
re.vg
leaselock.ca
mfe.me
impossible.ca
impossible.ca
allenblock.be
bettiepardee.org
kiesza.ca
aludor.com.xn--ibi.tk
impossible.ca
5272653.ca

Certificate

The complete raw certificate details for xn--ibi.tk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IBAD+AeNlu2LRSJ+679
ptj7DxKYrHvZwqvWyWhhgl72WumBUppE5g69HFJA7e6Pl6fwoQkwgZPIRvBbLOEQ
nQ01JjKwXbNGCDuUhdbLQu7JO2coPrlu5khYlJaG4B8NFy55uvXdEu2sHjiONyDI
C02Fw+TXVMJcKO3kpZLD66RdZ7LSzegbXafx87uQE5xNoynflXUkmsYIpFj754We
nr3Y7v/6YaAhl3TWjUnSm/JJAH5lbtg2p8Y3GD1PeuNzlnbGDzgbfSKYuv7uM+Vk
YjakLg4YsRT5eBseQxMYwnV9tdNpUY4o+wM3H05A3icAFVnspUy0pAzY7i+Fw8zS
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302011270811880628280305652074340634661864
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 05:48:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 05:48:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--ibi.tk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27835669644063768925168410735679165021186946549119848886239157903058038499554997378276398805637887693947279523621193349872968248667030150464327914050487434804515826926813497529911452870308716035964083256084145370228873911995655336959900598688913844695798854903558417243182360458695214279346043340471261526766971289087162965600316866605155511806338654787980587907667981336403605750086691737656411291560955085586204483685617289993027660097379200608748393313446688464103369477939010566762726022783261064117530699873271083825571663679791579467637949417615927355626573813579364153997299428417411819359205835848398981091881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c7e472ad038c05e7e78f52fb9af5f77bf60595a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (248 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluesrap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckdk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elaproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundaiton.app.ipauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomesystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internet.lol.theselfevidentpodcast.com.americancoupdetat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l-v.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microdoseshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsymbiotics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvwii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omgdubai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ibi.tk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c0015e2220000040300463044022067dfea7e917192fa0c6accdbc9f12527ca6e3d55226f0ceb4611e8706930d9cd0220532ccfd44d317719f56e4cd2a12719dc0dcfc1a44cd6e53fbe79c05dac27f797007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c0015e22f0000040300473045022073a45343f1599347c30e32692b5bda6037411f8cd0df020642114c74837de5f7022100a743cd8d563890f6f233e9dd14e13046690cae996f70c910f0e99df38248f99e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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