astrafit.com

Issued by R10

About this certificate

This digital certificate with serial number 04:b0:80:fa:4e:e9:a9:5a:3e:c5:aa:ec:9b:af:2b:4f:30:03 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=astrafit.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:b0:80:fa:4e:e9:a9:5a:3e:c5:aa:ec:9b:af:2b:4f:30:03
Serial Number (int): 408510281163341782111758852117037979742211
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cb:3c:90:8f:83:94:82:cb:50:56:1a:d8:bf:f2:38:19:23:27:6e:02
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 66:f7:8d:44:f1:76:c7:a3:ca:b9:25:f4:74:43:f1:45:93:4b:da:db
Fingerprint (sha256): 3e:38:d9:99:39:78:84:e8:17:85:d9:cb:50:32:7a:50:82:65:6a:cf:f3:4d:15:34:e9:25:c3:ab:87:0a:50:c7

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate astrafit.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for astrafit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

astrafit.com
www.astrafit.com

Other certificates including the domain name astrafit.com

(limited to 100 certificates)
devsizer.astrafit.com
www.mypark.pro
devsizer.astrafit.com
register.spectreballistics.com
devapi.astrafit.com
tls.automattic.com
tls.automattic.com
www.sylvari.it
devapi.astrafit.com
astrafit.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
devapi.astrafit.com
tls.automattic.com
devsizer.astrafit.com
tls.automattic.com
*.astrafit.com
auth.astrafit.com
assistant2.astrafit.com
as-ta.net
tls.automattic.com
tls.automattic.com
astrafit.com
tls.automattic.com
www.astrafit.com
*.astrafit.com
devsizer.astrafit.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
www.astrafit.com
devapi.astrafit.com
astrafit.com
tls.automattic.com
astrafit.com
devsizer.astrafit.com
devapi.astrafit.com
tls.automattic.com
www.biometrical.no
astrafit.com
devapi.astrafit.com
devsizer.astrafit.com
diseasesovertime.com
tls.automattic.com
tls.automattic.com
www.astrafit.com
tls.automattic.com
astrafit.com
www.astrafit.com
devapi1.astrafit.com
tls.automattic.com
maguro.yokoe.me
www.astrafit.com
astrafit.com
www.astrafit.com
tls.automattic.com
devapi.astrafit.com
devsizer.astrafit.com
en.astrafit.com
astrafit.com
*.astrafit.com
astrafit.com
app.borbalo.ge
devsizer.astrafit.com
devapi.astrafit.com
astrafit.com
astrafit.com
devsizer.astrafit.com
dev.myhelm.io
devapi.astrafit.com
devapi.astrafit.com
www.astrafit.com
astoryofseasons.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
astrafit.com
devapi.astrafit.com
tls.automattic.com
astrafit.com
tls.automattic.com
devsizer.astrafit.com
astrafit.com
devwidget.astrafit.com
devsizer.astrafit.com
devapi.astrafit.com
tls.automattic.com
devapi.astrafit.com
tls.automattic.com
leadgeneratorbot.com
tls.automattic.com
app.borbalo.ge
astrafit.com
*.astrafit.com
www.astrafit.com
tls.automattic.com
tls.automattic.com
devsizer.astrafit.com

Certificate

The complete raw certificate details for astrafit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf+AwvvBpNl8pWgZ55lr
O02gOBmW00/j7XNAZWnjDckB4frO5uZVID35DJuWu2OC0zBheTKCixGS5OrTPaIy
OOjG9rs51KUIQMDe2s2LNanuU/Y2kUXO1Xk+wu2nAEN67j9cKJfNLPcVmchgJ5Dc
ebxauocz/P1/V1V2KvrmQ9o9raGlt6rPtJ3HBhyRLn9AU9ie1nyzIX9wyxwLrztB
jaa8X2LKfQVxH6SBtbHP8IeweTez8J9aLHzHwOAK/iIG4xC2dLIAEdFh9JFQtgIG
5zQS15RJl6x0zHeKy5JpM8wdssKE2g5LbWQq3oDovMPUcDRYZ0ENFdX4Isx1uA+c
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408510281163341782111758852117037979742211
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 23:02:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-22 23:02:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'astrafit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22470173191900238344219294143244184428733178610025860127018397191166919963373291240388746097067831587416602420905879432027987202656689828269945702185426579514793830700570439259071228315153078953015768546488120099712940876267576921554878171900659642131673187018109468101805665198126863076681145389698080528076636269985809158182516660813778237033033682434029529657557886886954899658016982505780835991345043253487486921162503588992116324495610126921415240346353495788344219374895095762169829442242907419611915180271296490694854730618201288808848050639490681456396985272045322747172029459917059528729334242134036573035763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb3c908f839482cb50561ad8bff2381923276e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrafit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astrafit.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e000001904cb389e500000403004830460221009884a41032e7e70f065dabf05aa3a610c09f47b6e63dcfe44b2760c4b42c2225022100de1bd220ca320d33a2379cf5993f8e0009fad9cda6018eb6f8d8b7412da9504500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001904cb389e70000040300473045022100fe35337a831c04e46001eca86bd1bf80a5f58d36c50e79757739d21859ff2314022022d0d851882cb4c444f0d9246f56070a9381c56c2839e8e74bb21a61b22544ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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