aerofare.com

Issued by R3

About this certificate

This digital certificate with serial number 03:56:d3:b1:47:e6:5f:01:20:46:c3:b2:da:a5:55:64:83:db was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aerofare.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:d3:b1:47:e6:5f:01:20:46:c3:b2:da:a5:55:64:83:db
Serial Number (int): 290882528952438987386224214188002659042267
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:79:8e:84:30:d0:cd:aa:8e:ee:2c:3d:98:fd:3b:33:14:bf:70:27
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b5:cf:34:03:18:81:21:9c:10:1e:2b:5b:b7:f9:95:6f:26:9b:f8:3b
Fingerprint (sha256): 42:b0:4a:0c:db:aa:8c:68:0e:a8:fc:21:5f:3d:aa:19:11:b6:24:89:1e:89:0e:bf:db:28:0f:84:d9:61:4c:88

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aerofare.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aerofare.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aerofare.com
arthurcounty.com
candlecharting.com
coolhonolulu.com
crushfox.com.weightlossblogs.com
freepastperformances.com
gfanz.nz
legal-docs.com
letsgetmore.com
longovity.com.pritonmail.com
manhassetchristmaslightinstallers.com
yessirree.com.dentistfinder.in

Other certificates including the domain name aerofare.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for aerofare.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXsVpnyd4Adin9lKn+xe
jvoz8TGNbf4QWzUe44y48AwEp5iJQw7JX4BivnC/dZTrYvEc9jIU8v5Kgi+5RwRC
DNw/jxswqrhWlkEkwDKgkgcK0PVLn7EWcJ5F6kKv+HoGIC2LC8CO3L9b5jTuqFco
LGS42+ULnqa2I4sUlN8yFssnDofNUV1SxDIT67Jv14zLJrw6GMH6TWBLIeo6t6rc
2lyd2Ywq4HW1podTddllmloZIdqkYfwSevCkIeKgkUGhxrkgiTIZoGp5dCCxhF0g
jDNqxcd3e8DtfLes5jsS2a9T+6pb6NIPH7YJFx1cKPtNuZy4+7kH6aso44WRU4Dx
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290882528952438987386224214188002659042267
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 08:07:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 08:06:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aerofare.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23919734903002629445289815975876380274095840383807745879394899146501808163862362522004392500696683513890592021213241710041635461381210420687679476917611256446331199375712483757187614189498187801622009324077057466009178476761342126607454755496200754440552074209340409586230024798236893167101327727781552985878741394630001604894899556603764401499871624223388482144130794232349975104882106758299623056076727371412128006274549070883350266916523448278498769269837648100994261556464990903549117893809916317123103901813477000047653793325315154048784499345457407390807570285186433695514002650192495129144529354629129500160407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04798e8430d0cdaa8eee2c3d98fd3b3314bf7027
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (278 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerofare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arthurcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candlecharting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolhonolulu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crushfox.com.weightlossblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freepastperformances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfanz.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal-docs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letsgetmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longovity.com.pritonmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhassetchristmaslightinstallers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yessirree.com.dentistfinder.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c679448810000040300483046022100cd9bc05e631f3cbc1f16122a4a6402e102ebbccf21d6fabe3d40a1343792f163022100ff395d44b38b1fb0f27c799c0626a5d046653a3d6e5bc80d1bea8005c1561afc00750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c6794496900000403004630440220251c0c4f6b5925809d6c931162a9ba199904b8dcafcb9996036e40becea25f5702202310a69d6972d58a389794880e118e4a090e688314561c3c881218e6f6eab8f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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