tempsprivilege.com

Issued by R3

About this certificate

This digital certificate with serial number 04:34:63:39:f2:3b:cb:35:c5:7f:88:df:6b:55:9e:db:69:16 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tempsprivilege.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:34:63:39:f2:3b:cb:35:c5:7f:88:df:6b:55:9e:db:69:16
Serial Number (int): 366275721252513905977950188213798075853078
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5c:e2:e4:74:6d:64:6f:9b:9e:1a:46:aa:82:86:95:7e:58:a9:2e:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d4:40:2a:e1:3f:4c:de:5e:3d:99:29:c6:d4:a2:73:cd:15:a6:6a:db
Fingerprint (sha256): 47:4a:f8:ba:12:cd:ac:82:ab:d9:e5:b6:c9:c7:73:ca:c6:2d:9c:aa:17:b1:a4:48:8d:4a:32:bf:90:a7:8e:3a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tempsprivilege.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tempsprivilege.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tempsprivilege.com
www.tempsprivilege.com

Other certificates including the domain name tempsprivilege.com

(limited to 100 certificates)
tempsprivilege.com
tempsprivilege.com
kontikimedia.com
kontikimedia.com
kontikimedia.com
tempsprivilege.com
kontikimedia.com
tempsprivilege.com
tempsprivilege.com
kontikimedia.com
tempsprivilege.com
tempsprivilege.com
kontikimedia.com
tempsprivilege.com
tempsprivilege.com
kontikimedia.com
kontikimedia.com
tempsprivilege.com
kontikimedia.com
tempsprivilege.com
tempsprivilege.com
kontikimedia.com
kontikimedia.com
kontikimedia.com
tempsprivilege.com
tempsprivilege.com
tempsprivilege.com
kontikimedia.com
kontikimedia.com
tempsprivilege.com
kontikimedia.com
tempsprivilege.com
tempsprivilege.com
kontikimedia.com
tempsprivilege.com
kontikimedia.com
tempsprivilege.com
tempsprivilege.com
kontikimedia.com
tempsprivilege.com
tempsprivilege.com
tempsprivilege.com
kontikimedia.com
kontikimedia.com
kontikimedia.com
tempsprivilege.com
kontikimedia.com
tempsprivilege.com
kontikimedia.com
tempsprivilege.com
tempsprivilege.com
kontikimedia.com
tempsprivilege.com
tempsprivilege.com
tempsprivilege.com
tempsprivilege.com
tempsprivilege.com
tempsprivilege.com
tempsprivilege.com
kontikimedia.com
tempsprivilege.com
tempsprivilege.com
kontikimedia.com
tempsprivilege.com
kontikimedia.com
kontikimedia.com
tempsprivilege.com
kontikimedia.com
kontikimedia.com
tempsprivilege.com
tempsprivilege.com
tempsprivilege.com
kontikimedia.com
kontikimedia.com
tempsprivilege.com
tempsprivilege.com
kontikimedia.com
kontikimedia.com
tempsprivilege.com
kontikimedia.com
tempsprivilege.com
tempsprivilege.com
tempsprivilege.com
kontikimedia.com
kontikimedia.com
tempsprivilege.com
kontikimedia.com
kontikimedia.com
kontikimedia.com
tempsprivilege.com
kontikimedia.com
kontikimedia.com
tempsprivilege.com
tempsprivilege.com
kontikimedia.com
kontikimedia.com
tempsprivilege.com
kontikimedia.com
tempsprivilege.com
tempsprivilege.com

Certificate

The complete raw certificate details for tempsprivilege.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PPreGOGaQMikyQqHSFp
SdaIV9IYUmtA0EpJIBg0hQqDWMqm8mNwB6liK+c5vCqcFgymCVREAVlHl0YnDMzH
SxMaDBSWNVL3BVE5hFhqX5cSHalCzK4/wB16CM+/s40zPuvtJQ9yjJt/rJOXvSTW
uydGxBT0ai50K/dkLtOie7U4iDQGawD7pJu38U+f02WLKTsegIgdBFkBOsFeS4xo
ZO8+vSYwBtFJ76McHKBanzQDcIm70vl9pm0EOsG8wg+iSxnE/ej/I7xZLru+TfZm
GyxFNjIL5b4P4If3CppOQbyWkqqJEkzq4ZBP+V0RAX1AxVVOwsdr//VkhSGjGS42
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366275721252513905977950188213798075853078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-29 05:37:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 05:37:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tempsprivilege.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31427380970738277597720260924565917647285911894780171611476621186441261729293009814066872275067927001832022444128866365957665804746532738117141253261755410453288570623000570601025782848769497350111599507029950783143172438164663333517786664188577856087801719955800489189588824858048570673114487769461466707937406045109203756941269753996061691358570288145179963389427755616373257121874083911678298303267048362184537259568011352556586391807255441678606711471176247688658035322568775979760203135399489857142486021456949281172529185922422748654801419213116023128651018072932837054380190473043845097981322393121199489955361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ce2e4746d646f9b9e1a46aa8286957e58a92efb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempsprivilege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempsprivilege.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187cbbb27da000004030048304602210082c844aa0ba100a2182bb698cd61150b4a74cd9cb1995df699619fbcbca86506022100af80b5807e6510d15f5cbd569bfd39e3de3a5155c222f4e317e4c3aace71ba28007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187cbbb28100000040300473045022100fb45c970061fe4c5e4a25cbdcd8a6cab68bec56fb5122d66f98a68f9ef177351022049e1a3067a30f0ede7324acda888126c178124fff902a3ebf41431c6c5e5b595
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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