area9lyceum.com

Issued by R11

About this certificate

This digital certificate with serial number 03:36:3a:fa:97:68:e5:33:04:86:79:b6:87:20:01:a1:5e:43 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=area9lyceum.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:36:3a:fa:97:68:e5:33:04:86:79:b6:87:20:01:a1:5e:43
Serial Number (int): 279790501977936088591151194218332982173251
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:49:f8:3f:8e:88:a2:c6:4a:26:d5:ce:9e:07:c6:e1:09:5b:c6:de
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): cf:e9:2d:ee:43:bc:0a:95:b7:2b:9d:cb:c7:60:17:9a:54:7d:79:c4
Fingerprint (sha256): 44:72:32:04:92:35:ad:68:fd:7b:b0:b0:7f:53:00:22:a4:e6:f6:b0:71:96:23:4b:51:32:b6:59:30:24:95:eb

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate area9lyceum.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for area9lyceum.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

area9lyceum.com
www.area9lyceum.com

Other certificates including the domain name area9lyceum.com

(limited to 100 certificates)
slow-no-cdn.martin-ghost1.dev.area9lyceum.com
martin-ghost1.dev.area9lyceum.com
status.site24x7.jp
jenkins.area9lyceum.com
rhapsode.dev.area9lyceum.com
*.curator.rhapsode.com
eu.rhapsode.com
area9lyceum.com
offers.area9lyceum.com
area9lyceum.com
elb.rhapsode.area9lyceum.com
ar.area9lyceum.com
offers.area9lyceum.com
eu.area9lyceum.com
jenkins.area9lyceum.com
ar.area9lyceum.com
jenkins.area9lyceum.com
rhapsode.dev2.area9lyceum.com
*.curator.rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.area9lyceum.com
area9lyceum.com
rhapsode.covid.area9lyceum.com
slow-no-cdn.ghostenv-yegor.dev.area9lyceum.com
area9lyceum.com
status.area9lyceum.com
eu.rhapsode.dev2.area9lyceum.com
slow-no-cdn.ghostenv-yegor.dev.area9lyceum.com
rhapsode.area9lyceum.com
area9lyceum.com
offers.area9lyceum.com
area9lyceum.com
usdev.area9innovation.com
rhapsode.qa.area9lyceum.com
blog.area9lyceum.com
amccinema-ksa.status.vistamanaged.services
ghostenv-yegor.dev.area9lyceum.com
git.area9lyceum.com
jenkins.area9lyceum.com
rhapsode.area9lyceum.com
rhapsode.dev2.area9lyceum.com
rhapsode.covid.area9lyceum.com
rhapsode.dev.area9lyceum.com
usdev.area9innovation.com
git.area9lyceum.com
jenkins.area9lyceum.com
rhapsode.covid.area9lyceum.com
slow-no-cdn.martin-ghost1.dev.area9lyceum.com
help.area9lyceum.com
blog.area9lyceum.com
area9lyceum.com
rhapsode.dev.area9lyceum.com
area9lyceum.com
eu.rhapsode.com
slow-no-cdn.martin-ghost.dev.area9lyceum.com
eu.rhapsode.qa.area9lyceum.com
rhapsode.qa.area9lyceum.com
rhapsode.dev.area9lyceum.com
area9lyceum.com
area9lyceum.com
rhapsode.dev.area9lyceum.com
patnl.status.app.vista.co
eu.rhapsode.com
area9lyceum.com
status.site24x7.jp
area9lyceum.com
usdev.area9innovation.com
eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.dev.area9lyceum.com
status.site24x7.jp
blog.area9lyceum.com
blog.area9lyceum.com
blog.area9lyceum.com
help.area9lyceum.com
*.curator.rhapsode.com
offers.area9lyceum.com
ghostenv-yegor.dev.area9lyceum.com
area9lyceum.com
ar.area9lyceum.com
rhapsode.dev2.area9lyceum.com
usdev.area9innovation.com
martin-ghost.dev.area9lyceum.com
rhapsode.qa.area9lyceum.com
jenkins.area9lyceum.com
eu.rhapsode.dev.area9lyceum.com
martin-ghost.dev.area9lyceum.com
help.area9lyceum.com
git.area9lyceum.com
rhapsode.area9lyceum.com
area9lyceum.com
area9lyceum.com
jenkins.area9lyceum.com
rhapsode.area9lyceum.com
blog.area9lyceum.com
rhapsode.area9lyceum.com
offers.area9lyceum.com
curator.rhapsode.com
ar.area9lyceum.com
ris.rhapsode.covid.area9lyceum.com

Certificate

The complete raw certificate details for area9lyceum.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSJ2q/VgDMBkK8Zb/Faa
leJpm4QOZ734enaGXLwgl6C3yHkTd6LBExfDm7Ff0PXbUAjtnX84wEmKV/iM9VSH
n6xdBRFaaK7QbKpVTEW1MkzluSnl9Iiaselcl8eCRd3AQPgsfi/2ImEBMmwyPjZV
+o7t1f+OJzwKu8u6hAWSyB5ETC4OnlIlXZXab2J6AQLLb2C2lXzpPIjYsoWH2uSe
Bgcthp3b2tcxZOPNdrmx5hp+Ah7IX2mFlTpZTwAeljt1v7bNcd2J+zQEgFlKsttp
7BrcJLY8gfU5U6yZ4qlSD5z/6OvcAWxOGf011oUcevFWgdeJ1mrlMrgT5EB695n5
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279790501977936088591151194218332982173251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 11:44:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-22 11:44:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'area9lyceum.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22866127814370309270541741640001291315375322020096687562217763582016777454544200375613547252344734805931677202140096928287609966914423401684329618095968182466615272127358214377210520232043586135795710368986087154092425220390231306102711666486337122434278963874870599460656168418910154732358180674935594258272296531297564251779098402313733901863167510325660493653153048303563930655263613721489236956568307457755285010905994811839981383995565391476064194762657332417106125730328444398419997342732486874918441995134337723194174214244171587289093465063378085345584000032915811301019027234323378712361936567832742463142281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af49f83f8e88a2c64a26d5ce9e07c6e1095bc6de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'area9lyceum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.area9lyceum.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e000001904a46b5720000040300463044022072fdc81cdf4adc80d8bc02ef6045ab6cb9ceb68a08ffbe96142534d6a92525d502200b127f07b6f51d33315db91b90f900fda6c9c05b169128a7f0cd3275c1a90d64007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c000001904a46b62b00000403004630440220285da285453fde2ae04656100ebbbb818c2a600d106b8b578ca80748327a55f202203113c56259abd947df9a83cb1c781aaf6f81df8d04918f714a805905eb3910f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001f14fc3d0ecfb24fdcdb72f4711caebd6e509237a86ba1fb0161ece0f4d569db40f0a7757f1bef908b70d94bee7c2f2e9f189c2feaed4d116b8f665dcb1cfa12b7a11b9a6512cb1e8d73c940f0439247d7a939044487700dbd79604e96ea980a94ec85eebbd3b45b51f70d84b5896273e0da6caab57e6e5999797074d84cf901c402ecd1ce3a47f4da7c56719e5ebfa63577a8ee54f6d00853c427914d966f4c576aacb1a8b7cb003e2ba79eae5e9696656e45f6adb2bb1b32b2225d5879c8c1837c0143a45fbd9e1b6d95765658c5e8bfdcbbefc282d488dceb5722c4d3eaa87c83103508709ea8977187f5f37bba942d42e0df70d882ae20bba96103356942