stefs.me

Issued by R3

About this certificate

This digital certificate with serial number 03:93:0d:6a:4d:1e:9a:23:a7:94:cc:89:ec:a0:3e:bb:93:fb was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stefs.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:93:0d:6a:4d:1e:9a:23:a7:94:cc:89:ec:a0:3e:bb:93:fb
Serial Number (int): 311376197644240990818966925282380156212219
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 14:95:b7:48:7c:90:a2:9b:30:ea:28:16:59:3f:c4:c4:46:20:5a:72
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 30:71:32:37:6b:7f:d8:7f:8e:61:3d:0a:e8:83:e9:fa:bf:b3:f9:d1
Fingerprint (sha256): 41:62:56:62:57:08:ad:98:ff:a2:be:b7:28:de:50:e1:90:4b:f3:56:e2:30:3f:c3:97:fb:8d:27:43:09:bf:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stefs.me

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stefs.me

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stefs.me

Other certificates including the domain name stefs.me

(limited to 100 certificates)

Certificate

The complete raw certificate details for stefs.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311376197644240990818966925282380156212219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 15:31:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-09 15:31:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stefs.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 589779504116759806984832752438305281113378986637330267306793977628045062197604459887050008907326826358426466044109922101864669556376813332875924634732251700153898135703653497061231489663545801526386932929823949742550260307733051447258138218097811464835139713436859952465243177905690239760139346877750857501361630160526247790119151106408957818221447259409498907382251876563748651046851032333413020170697999193443015226412496295171056487108294651294680493159224691949752597905402672450232352692865866549399855123511278085147349108446764429642711631925345815046408295324516632255205666534803760900134764335538058992144483177046748640630176273840417322153944127211727218115972647874558334891182205727330616441533195774476245508249465437659388879812006739191285495964589587769082236953419927001208442644735759837342161332543817160049135860661798181236152275894145800529610972768819216131711907053208292613426543417702775197290133181337392881371166176139515317669145478968060845309613766806519311284469916329107731737119143656409255618695136884271635778558784925502303628882820157544718566099800931101539887823848999939998604501547794486214022740719843121692044333757172238532020627120273505245986465797130300565733761437339478188026530703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1495b7487c90a29b30ea2816593fc4c446205a72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stefs.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ec8d980d3000004030046304402207bd3a33999a0ee20906cd3e9c1d72af595b3ce5b52a094bb2b937c70df8fa47602204fce2da1fcbb7fb0eba026bc2e2a1e9fc9d4d260e62cbf2e54e228d6131c31fa007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ec8d980d80000040300473045022100b87f6efb50d3e0a6763feb681b222e8071c3eab1c1ea476ac67dd7ac5dba1aad02203dbd9dad2cf24cccf7edf25d7d39c098efc495bf1875d09f79137ce0ba735e47
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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