acoperim.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d5:07:d7:1f:1d:88:ea:7e:ba:8e:17:4a:92:45:9d:fd:e7 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acoperim.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d5:07:d7:1f:1d:88:ea:7e:ba:8e:17:4a:92:45:9d:fd:e7
Serial Number (int): 420939709452090646577797301757936255499751
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ea:27:ac:eb:bc:8a:47:19:f6:85:e3:0e:cc:05:28:f0:a3:3c:02:92
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 10:96:54:67:01:73:ac:4a:2a:60:b4:7e:69:cd:88:8b:39:b2:04:ba
Fingerprint (sha256): 4b:9c:ba:9f:5c:c9:50:f6:23:e0:56:36:35:c2:37:2f:7d:fc:4e:d5:25:5f:54:35:8b:5d:db:1e:a2:d0:c9:cf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate acoperim.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acoperim.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aaverse.com
acoperim.com
drmarcum.com
farmfreshegg.com
instatemoving.com
languagesspanish.com
myjourneythroughgrief.com
mynewvacationhome.com
ocean-ai.com
saltlakeregenerativemedicine.com
teslapowersystem.com
unchlorine.com
viatype.com
www.aaverse.com
www.acoperim.com
www.drmarcum.com
www.farmfreshegg.com
www.instatemoving.com
www.languagesspanish.com
www.myjourneythroughgrief.com
www.mynewvacationhome.com
www.ocean-ai.com
www.saltlakeregenerativemedicine.com
www.teslapowersystem.com
www.unchlorine.com
www.viatype.com
www.xmligong.com
www.xn--4dbcaqjicdt5aed1ieek.com
xmligong.com
xn--4dbcaqjicdt5aed1ieek.com

Other certificates including the domain name acoperim.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for acoperim.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mOwHAOBOzqQ1QFwoLZ6
+o7mrUElRpyuDiIVHusSosDYRLsQlij9gzt/aYAfK9SvlnlNQ4K79nEpCD3WrBnP
C1W6Ij1iebp0RIvifX+o/neW5UKalnZuEhdfnwf5w28AsvOZyNN9QlVckimC9sSu
GXF5Z8H7mi5O5wsN6I7eHqG5pKLAB5RzCgsYnVRDgOojPFOD7SBW5os27iGPq03X
hcraLYnRKIpm+mQG/wX6rPdXk53BfCCSeqnrMi4gbs8ZOLPM+N5GOrRvCIPh6o7N
EMCGHlOrXcfZvAPrpm5k5z7cfq6PrInf3AujNJvmGSG5ZhZftWrqm/zeO6aVO1Li
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420939709452090646577797301757936255499751
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-07 23:37:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-05 23:37:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acoperim.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28074061651634928996307619637596012839518293340891099049177691438484452264224283828604181121780110774908758785416653681842461688491828435259854683847564480943324439098627300737793008887741232040977761551753003553275578952099028782764981126889560156996445870132901329441681382271761526510383039057695451674000200108366656539428282850952242473845662587205290525234396599593542563791147662501197235581214635714630995912414469549994506365653874235710109417279569130703405579892859817765431885379581771539786317671266049133348780605872872044993866319922935361610290661488676496154655478553599886709216720191117502083949249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea27acebbc8a4719f685e30ecc0528f0a33c0292
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (650 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acoperim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drmarcum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmfreshegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instatemoving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'languagesspanish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myjourneythroughgrief.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynewvacationhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocean-ai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltlakeregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teslapowersystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unchlorine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viatype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aaverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acoperim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drmarcum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmfreshegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instatemoving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.languagesspanish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myjourneythroughgrief.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mynewvacationhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocean-ai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltlakeregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teslapowersystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unchlorine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viatype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xmligong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--4dbcaqjicdt5aed1ieek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmligong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--4dbcaqjicdt5aed1ieek.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186bea67bf5000004030047304502207e59473d4eaaaf6248cf749e92979ceb8b85227c3c14031d747490c7d547b25802210089348a74ba03ce2c796cb56d5b648200e9700064ef6d5cf115b70a186a8492ba0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186bea67c0800000403004630440220674297d378314b576674610c48c2f07892a8269298ef0ee957745d7c55d2d82f02201fbfa585350cc8e40bc7104b7b7bfe3f4e8f5529322101e3fdaec4ce8b03f9c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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