safe-plantain-scrivito-0302.scrivito.net

Issued by R3

About this certificate

This digital certificate with serial number 03:21:bf:41:42:4a:fa:dc:17:9a:90:ed:02:26:5a:aa:c0:9e was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=safe-plantain-scrivito-0302.scrivito.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:bf:41:42:4a:fa:dc:17:9a:90:ed:02:26:5a:aa:c0:9e
Serial Number (int): 272820397294741988124350673330489556385950
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 98:d3:e1:79:99:3b:4e:84:b9:30:cf:2b:36:34:e1:48:38:fe:88:cc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 16:1b:d0:2b:f9:71:cd:c9:55:5a:0e:cd:0a:4b:bc:a2:f1:8b:a9:60
Fingerprint (sha256): 45:a9:a1:f5:7d:54:33:89:e0:0f:99:20:95:ce:54:12:5b:26:b4:9a:49:40:5a:0d:63:00:ca:4f:3b:94:20:d2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate safe-plantain-scrivito-0302.scrivito.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for safe-plantain-scrivito-0302.scrivito.net

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

safe-plantain-scrivito-0302.scrivito.net
wingsforkids.org
www.wingsforkids.org

Other certificates including the domain name scrivito.net

(limited to 100 certificates)
ae871acebc5b9c1648cd9b07ab52a469.scrivito.net
dev.getbarry.co
energetic-apple-scrivito-0118.scrivito.net
action-blackberry-scrivito-0827.scrivito.net
www.safehomeinspection.com
cheery-cranberry-scrivito-0412.scrivito.net
dickdavis.biz
agreeable-grape-scrivito-1107.scrivito.net
*.uciebie.pl
22-media.com
graceful-cantaloupe-scrivito-0315.scrivito.net
quiet-current-scrivito-0225.scrivito.net
scrivito.com
iopwsc.com
25a94408c9028f1a0f51b8712e3fab54.scrivito.net
*.homeinspectionlink.com
agreeable-grape-scrivito-1107.scrivito.net
dickdavis.biz
new.catsamkunze.de
elegant-melon-scrivito-0121.scrivito.net
moving-tangerine-scrivito-0604.scrivito.net
632f8e725924cb98df09ffa27c521c18.scrivito.net
iopwsc.com
hearty-orange-scrivito-0918.scrivito.net
moving-citron-scrivito-0713.scrivito.net
25a94408c9028f1a0f51b8712e3fab54.scrivito.net
reliable-watermelon-scrivito-1023.scrivito.net
scrivito.eu
moving-tangerine-scrivito-0604.scrivito.net
dataspringinc.com
cheery-cranberry-scrivito-0412.scrivito.net
moving-tangerine-scrivito-0604.scrivito.net
www.tennisfame.com
www.tennisfame.com
2842b104d5ed38ae7f6549a40cf18bda.scrivito.net
safe-raisin-scrivito-1017.scrivito.net
defides.de
hoerklinik.de
henrypak.com
moving-citron-scrivito-0713.scrivito.net
quiet-current-scrivito-0225.scrivito.net
safe-plantain-scrivito-0302.scrivito.net
admired-plum-scrivito-0714.scrivito.net
edisonnation.com
hearty-orange-scrivito-0918.scrivito.net
energetic-apple-scrivito-0118.scrivito.net
*.hoerklinik.de
quiet-current-scrivito-0225.scrivito.net
dataspringinc.com
scrivito.net
dickdavis.biz
iopwsc.com
defides.de
scrivito.net
f499262adc020bc4405176875195d55f.scrivito.net
dev.getbarry.co
moving-citron-scrivito-0713.scrivito.net
moving-citron-scrivito-0713.scrivito.net
fiona.infopark.com
dickdavis.biz
moving-tangerine-scrivito-0604.scrivito.net
*.machinegunnersaz.com
moving-tangerine-scrivito-0604.scrivito.net
*.homeinspectionlink.com
*.homeinspectionlink.com
bisonbranding.com
energetic-apple-scrivito-0118.scrivito.net
moving-tangerine-scrivito-0604.scrivito.net
22-media.com
632f8e725924cb98df09ffa27c521c18.scrivito.net
dickdavis.biz
2842b104d5ed38ae7f6549a40cf18bda.scrivito.net
quiet-current-scrivito-0225.scrivito.net
ideal-melon-scrivito-0523.scrivito.net
dickdavis.biz
*.homeinspectionlink.com
safe-raisin-scrivito-1017.scrivito.net
energetic-apple-scrivito-0118.scrivito.net
*.icbt-hannover.com
moving-tangerine-scrivito-0604.scrivito.net
ideal-melon-scrivito-0523.scrivito.net
scrivito.net
iopwsc.com
2842b104d5ed38ae7f6549a40cf18bda.scrivito.net
25a94408c9028f1a0f51b8712e3fab54.scrivito.net
*.meu-strasbourg.org
safe-plantain-scrivito-0302.scrivito.net
scrivito.net
safe-plantain-scrivito-0302.scrivito.net
2842b104d5ed38ae7f6549a40cf18bda.scrivito.net
dickdavis.biz
graceful-cantaloupe-scrivito-0315.scrivito.net
*.meu-strasbourg.org
graceful-cantaloupe-scrivito-0315.scrivito.net
2842b104d5ed38ae7f6549a40cf18bda.scrivito.net
elegant-melon-scrivito-0121.scrivito.net
distinguished-guava-scrivito-0220.scrivito.net
dickdavis.biz
dev.getbarry.co
agreeable-grape-scrivito-1107.scrivito.net

Certificate

The complete raw certificate details for safe-plantain-scrivito-0302.scrivito.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEejCCA2KgAwIBAgISAyG/QUJK+twXmpDtAiZaqsCeMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTkxMTIwMTNaFw0yNDAzMTgxMTIwMTJaMDMxMTAvBgNVBAMT
KHNhZmUtcGxhbnRhaW4tc2NyaXZpdG8tMDMwMi5zY3Jpdml0by5uZXQwWTATBgcq
hkjOPQIBBggqhkjOPQMBBwNCAASxP8Ylw+Sdjk1sjs7jD1rqMYuLcw9+X4Vw7K/E
5/n5Q5iIMDO1PeU7v9QlLRdkSk6eTtTBWk5+QB17327VWL5to4ICUjCCAk4wDgYD
VR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBSY0+F5mTtOhLkwzys2NOFIOP6IzDAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzBbBgNVHREEVDBSgihzYWZlLXBsYW50YWluLXNjcml2
aXRvLTAzMDIuc2NyaXZpdG8ubmV0ghB3aW5nc2ZvcmtpZHMub3JnghR3d3cud2lu
Z3Nmb3JraWRzLm9yZzATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAAB
jIIE+s0AAAQDAEYwRAIgIborJ0n/IvvpVsoSQamugCwEx9LmAZ4Xn3z9wztgU/8C
IG/92CmMYzPQDQVm79B2QZ1JaRk4XthqdX0+KRcGunGeAHcAdv+IPwq2+5VRwmHM
9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGMggT7FgAABAMASDBGAiEAiKYuOalpus3r
rIdVchS0mKQq5nw/vSm2tzObM3w5ObUCIQCVIIsM1eReLpYirYqfs7xIXFDTroJ1
LsTe90OyhVIVuDANBgkqhkiG9w0BAQsFAAOCAQEAb5XupY5APpwbt07584W/Hgl9
yTA+hWFn9UNmgTTEzHRqs65cnA2dHdiBHkPUhXN5BCj+uRWp4v71244jV6QOIolz
iP9zXU1IbsyEaGSIxW/hQA53jIN7Gbziu+OVylXLzkbv63uBuKpNJKSpgSfN1md2
iS/2TcuAN7gjTIeIo1KvkhgOcSFZuiSgumdbjADM0P/kPSQAcJ28VHBXL7p5yaUD
jqIoeFnkkrpxzLVUphnVzRWyDcol884OEoCrxo6k62pXs/6psnq9LOx5JDzgZygd
AcxrPRiZwOdkAHTS/c0d5qQVGkwoRqj/hSaYRTKdezQiohkvAtyk2MgsD7fXQw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEsT/GJcPknY5NbI7O4w9a6jGLi3MP
fl+FcOyvxOf5+UOYiDAztT3lO7/UJS0XZEpOnk7UwVpOfkAde99u1Vi+bQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272820397294741988124350673330489556385950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 11:20:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 11:20:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'safe-plantain-scrivito-0302.scrivito.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004b13fc625c3e49d8e4d6c8ecee30f5aea318b8b730f7e5f8570ecafc4e7f9f94398883033b53de53bbfd4252d17644a4e9e4ed4c15a4e7e401d7bdf6ed558be6d
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98d3e179993b4e84b930cf2b3634e14838fe88cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safe-plantain-scrivito-0302.scrivito.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wingsforkids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wingsforkids.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c8204facd0000040300463044022021ba2b2749ff22fbe956ca1241a9ae802c04c7d2e6019e179f7cfdc33b6053ff02206ffdd8298c6333d00d0566efd076419d496919385ed86a757d3e291706ba719e00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c8204fb16000004030048304602210088a62e39a969bacdebac87557214b498a42ae67c3fbd29b6b7339b337c3939b502210095208b0cd5e45e2e9622ad8a9fb3bc485c50d3ae82752ec4def743b2855215b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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