shortstories.cc

Issued by R3

About this certificate

This digital certificate with serial number 04:cd:eb:a5:96:13:7d:3c:86:a2:b6:fe:1c:3a:64:4b:8c:44 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shortstories.cc

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:cd:eb:a5:96:13:7d:3c:86:a2:b6:fe:1c:3a:64:4b:8c:44
Serial Number (int): 418520257297730019506275592994678951873604
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 20:9d:d9:d7:b7:28:86:ad:3c:0c:e3:7e:fb:d2:ba:c6:2b:7f:ef:13
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b9:34:ff:b1:19:8b:7b:6a:5d:ce:5a:d2:36:f1:d0:55:11:85:e5:71
Fingerprint (sha256): 4a:6f:87:96:35:c4:02:48:f3:39:4f:1b:1d:3c:f2:8e:ff:36:4f:35:23:0b:39:97:a8:0b:7a:68:eb:56:75:16

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shortstories.cc

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shortstories.cc

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affordabledesignerclothes.com
austincommercialappraisals.com
copyrightgov.com
covertcloudvpn.com
der-dritte-weg.org
enspirational.com
everestreal.com
freeloftinsulation.uk
go4vip.com
gourmetgiftchocolates.com
imagedesignshop.com
indiajewels.co.in
joeymartinracing.com
roadto50racing.com
schweitzer.cam
shortstories.cc
tennrealestate.com
texaswomenmag.com
turntablestylus.com
zealfam.com

Other certificates including the domain name shortstories.cc

(limited to 100 certificates)
shortstories.cc
seawatch.net.shortstories.cc
qdd.co.za
shortstories.cc
shortstories.cc
shortstories.cc
ticketsdirect.ca
zan.co.za
shortstories.cc
shortstories.cc
shortstories.cc
accountabilitygroup.ca
shortstories.cc
zan.co.za

Certificate

The complete raw certificate details for shortstories.cc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CGi7SDWhStvV0neLrB7
o4QyUvsyfSjeSeZ+l3u8ldtczYjiSyuV0800X3cQRv/nFnFA+NfoyOzY5gKvNwTu
AMOGNxh66aSUfeiGR31J9jKADDFXLc8C6etWiqKjHLBATf4XUhVnx7Fu/gdmzv/T
pousV3MWvdYC+1PLjYQlOeZCVuPtvyjFFu9BnmiNJ87Ei3T18xvOJywM8vkhknfV
4N3RQUfz5yHaYhSDxT+Gx7NeLgb9diQBnFzVgfjr1Qdf8P43wXghpqkelPF57o0N
AeVT8ZAxPCl6P9p8CiKrUC0sSioVnmc6bUZS4QDbJK7gqkvwi1hnW126qxfydjrP
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418520257297730019506275592994678951873604
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 10:13:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 10:13:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shortstories.cc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26779107395023474931725128830207119176187512480372065870401688643614344944565562505346077174354972390073320387283683768299869681521332836084238717092895634881705801964283533123553394334054631621275436758057281441488113738867736142427898035960054878062677374286410365714987583879994875818259812550446051125540006779288774260065697276411681542955775029022665081170177317141164156226671816409293519957746372040536032724567575297503197716837947094915525668732640161449667352972090826833932396677641165496516445077557818826024712683709647471271368675980063823719838940143140116460026978708173266104111200050190388416925631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							209dd9d7b72886ad3c0ce37efbd2bac62b7fef13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (411 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affordabledesignerclothes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austincommercialappraisals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copyrightgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covertcloudvpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'der-dritte-weg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enspirational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everestreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeloftinsulation.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gourmetgiftchocolates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagedesignshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiajewels.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joeymartinracing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadto50racing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schweitzer.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortstories.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texaswomenmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turntablestylus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zealfam.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f57e82b950000040300473045022100a2f84579fe561a31d6552dd6207848bb3c4d3b830a60e37e6e4aa048d94748900220241a48e3fdd39298a0f00dd323bdcecd4234e72428555f5b86b5dbeb4f7e1086007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f57e82c920000040300463044022076d9f626375d98da1928cfe556ee228b2abded39f7ead44b497557755839442d02206204b33b8c4c299f3e152061ea9c9b53455ebe41ffd4c07010c5b50ffde59583
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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