twrs.life

Issued by R3

About this certificate

This digital certificate with serial number 03:28:79:4d:09:10:e5:ca:b0:c4:50:f0:47:ad:ab:0c:03:8d was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=twrs.life

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:28:79:4d:09:10:e5:ca:b0:c4:50:f0:47:ad:ab:0c:03:8d
Serial Number (int): 275109389050346814618871248764066515911565
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ab:b6:a1:47:39:a8:95:08:2c:fb:d7:7e:03:1b:c7:9e:1b:1c:48:78
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d2:cf:2c:54:1b:01:44:ed:e5:2f:41:59:7e:d3:e3:7d:50:10:ac:80
Fingerprint (sha256): 48:1b:09:9f:01:5c:c6:fd:e3:e3:9f:90:54:36:63:a1:08:45:85:83:34:a0:42:cc:7c:6c:20:f3:d6:19:63:48

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate twrs.life

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for twrs.life

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abletocook.com
ashlandcitylimits.com.smarttxbroker.com
atomic88.net
authenticatedproducts.com.sanantoniodentistdirectory.com
barroncountyrepublicans.com
livingwithacolostomy.com
moneyforum.net
mustanggrape.com
mydomaincatalogue.com
redlineautowurx.com
rxsugarbarz.com
thedisastermastersplan.com
trucise.com
twrs.life
uplandroofers.com.toyplanet.in

Other certificates including the domain name twrs.life

(limited to 100 certificates)
twrs.life
twrs.life
twrs.life

Certificate

The complete raw certificate details for twrs.life in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplCXg4DY2QQGJM05uYh6
guxGmFjX0rtdLLdxZxvdoTtp9xleePu0XzG/5DeSPmzRuunQ2fn9BHg9U2jBVT8U
RD/4KXDkJeHCX20YZqxMcMOJRumEm0S+/jPNLztJAS3sZHcgX6wcAUimJcKtAa+p
pRbX7tAfTj0LbvPH77rSizS441dznwCOViRjpebhW3LL7akrcfHxD9SUp6yQx50E
I/pBZho8d8EhC6dCOQuhBVQY2DksBZLYUDOgE0YRDWLnJxYemzgyFf2J7OSijTLO
j/7aL7qgvLNrlxwf5IH3unkBphCzonWnh6yA5FlpP2201aRHE7iWQ4bdDjOS0TFe
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275109389050346814618871248764066515911565
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 07:29:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 07:29:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'twrs.life'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20995299946943447526185481447449589034510931643160678878680719306204879896950058471412388495263877196020135140378869606603820580735162122329715562039242081293966982866199452766340993586609083060225374908735316345957399380062880470065756395059769405590698960330201463024020130406142597168865870008370959337005738833179766963674722093718736337198250338502970788535589053742072143594043191666628785357142384476400764580671431386489968996329371718318541603959877652383856130098107846044869005359878943941682582860462590761392879603688363021879592671812943477825356147694022945011264364850603439946640672312866065102233231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							abb6a14739a895082cfbd77e031bc79e1b1c4878
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abletocook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashlandcitylimits.com.smarttxbroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atomic88.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authenticatedproducts.com.sanantoniodentistdirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barroncountyrepublicans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithacolostomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneyforum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mustanggrape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydomaincatalogue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redlineautowurx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarbarz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedisastermastersplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trucise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twrs.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uplandroofers.com.toyplanet.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bc2a63c9f0000040300463044022008eae666243f5e09b0c7095e03cc82f229f511455f1e8cfebbf1db5c14c59915022058abe3fd8d87517a79fcbbf082fda937480e6fddc87c860dc27a498adcc501710076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bc2a63ca70000040300473045022100823a309a4bf87826d142d5a99d3408350d2156060f3402e9ce59117c45452f620220186c8d194d42af33ee37a5d334ab59b3a07dabb0d9348fb1708fa4f81a840810
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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