checkit.cc

Issued by R3

About this certificate

This digital certificate with serial number 03:4b:d6:da:62:b6:9a:43:64:28:e2:e2:c5:08:8d:7c:8b:c6 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=checkit.cc

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4b:d6:da:62:b6:9a:43:64:28:e2:e2:c5:08:8d:7c:8b:c6
Serial Number (int): 287143624028307666186842307629825048480710
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:64:b1:11:ee:6a:7b:e5:eb:b5:12:f2:d1:4f:dc:fc:4a:70:fc:c9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b8:98:a7:de:18:35:a2:cc:9b:8a:fa:93:75:3a:56:ff:53:44:72:63
Fingerprint (sha256): 4b:00:a5:06:38:2c:6e:97:5c:d7:70:98:e1:d8:1f:a3:62:47:78:dc:d5:ca:65:3c:39:10:4c:56:10:8e:d3:18

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate checkit.cc

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for checkit.cc

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alamocityseniors.com
arbitrageur.biz.costaricatravelnet.com
checkit.cc
frankspeech.design.truckforhirekelowna.com
homeschoolfast.org
roofrenewofflorida.com
spicytechnology.com
tackwell.com
tenacitydynamics.com
turbonutrition.com
www.lorainflea.com.keepitpeaceful.com.brandorigination.com

Other certificates including the domain name checkit.cc

(limited to 100 certificates)
sni217527.cloudflaressl.com
sni217527.cloudflaressl.com
highconvertingplr.com.windor-online.org.checkit.cc
checkit.cc
sni217527.cloudflaressl.com
sni217527.cloudflaressl.com
sni217527.cloudflaressl.com
ssl391058.cloudflaressl.com
checkit.cc
sni199807.cloudflaressl.com
checkit.cc
sni217527.cloudflaressl.com
ssl746881.cloudflaressl.com
checkit.cc
sni217527.cloudflaressl.com
sni132891.cloudflaressl.com
ssl391057.cloudflaressl.com
ssl746882.cloudflaressl.com
sni217527.cloudflaressl.com
ssl746880.cloudflaressl.com
checkit.cc
sni132891.cloudflaressl.com
sni217527.cloudflaressl.com
checkit.cc
ssl391058.cloudflaressl.com
sni217527.cloudflaressl.com
sni217527.cloudflaressl.com
ssl391056.cloudflaressl.com
checkit.cc
sni132891.cloudflaressl.com
sni132891.cloudflaressl.com
enerpac.asia
sni217527.cloudflaressl.com
checkit.cc
sni217527.cloudflaressl.com
sni217527.cloudflaressl.com
checkit.cc

Certificate

The complete raw certificate details for checkit.cc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlzO3EcJZ7l+qNX7dOAE
clLeBh6JDJKa4kHFZVvwJJ91uM4gBUrLRNRzyOZARkgCHlYjZD1NKwXm29BwTeg+
sXCoiQokqpVCNm7oN2a4RgUs59wyG/643qfB5mA9pPvTXOYw27U3F90rPPKj/jZw
r1seKfZwLVwNYiHuczp48DDG6pcWRPt/K7tzWTp3D64wVj6yM7C99fD45JRPgt1Y
3ba9suD6vXr2QM7AKvbKXHrugdEbUnQ+dZdLxGCECKSSS1OQpN6DJl0tUEV5J3JI
75uH4OYCMQWi6+i+Jn4JTzfaW8mM6+IWfYoi2btCYfZ2HhpC1L7HtgJze8P2vnMd
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287143624028307666186842307629825048480710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-25 15:39:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 15:39:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'checkit.cc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24031043298047308572638300960581994810781520094194820576628186203199937327347185343946245743067336352046341818343106964918848546053909822728652598662993292730556283949387819443808882156652773678345564614199510712423738640850604038520816416994329512288190480681976009730932886670629094000678813654192463297771677244750913265904311048475341469428744308823630349650075917931276219539499946641723526420142897228384900689215078768324384072716059074533315032914283929221571112898589607683540451989694602916995542192247287402364903741684105278473108078338159186364567102413571866818789690047641920855353786714491243497463103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f64b111ee6a7be5ebb512f2d14fdcfc4a70fcc9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (303 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alamocityseniors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageur.biz.costaricatravelnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkit.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankspeech.design.truckforhirekelowna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolfast.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roofrenewofflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spicytechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tackwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenacitydynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbonutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lorainflea.com.keepitpeaceful.com.brandorigination.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c075a1df2000004030046304402204164f8cee80966a0cf8a391dd0245d663a78a60c6a9c3eb86e11c10f1e06294002200e5d550537b8556f77215ed6cf4e9657e42e5b77112f348147f0f3dfc83df90a007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c075a1e6b000004030046304402201b85448a07965b335fe503e72e205dfbaec9b9ff4bb98c105dd25f38622bc88002202cf0b5789258fa921b127488292d13f1c60d660e5de34abd382c70ca80285b5d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004f3b56a0290a032867aa8dc4666a688b9d2a1b9d5a8f71580fdeab8200373a51fd02c988bf8feed9e14eb7d06f4f85bf7bb3cf78f0c5daa20f2a28a8c333212af187008ae0521471d36012d638f629bc1070a554993b8ebe9de893669d641918dc088fde63afd6581b81980678fd79192f78c8df20984c7926ecd59ba79c6664aa3a01d5aeb8de2c13d6bf1380f887a972ec499139cd725945b5965a48f4b2c28f6c338eb43e641d1ad5a3b356cb3ab7026d938810596ebb1ef1572ece2ab0da806b2284d0ae74c8e4b7f0332a87ea6b8f97287643584fd208c321a785b6e06c52213dfc634a865906b7404c3db6ea4a21e9e85cbb83bd7fe343e8253f9293d6