fineounce.com

Issued by R3

About this certificate

This digital certificate with serial number 04:11:2e:f9:d7:93:d0:4f:59:c0:0e:08:32:29:79:d9:a8:1a was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fineounce.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:11:2e:f9:d7:93:d0:4f:59:c0:0e:08:32:29:79:d9:a8:1a
Serial Number (int): 354296385706849895253328036610559845181466
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0a:c9:3d:09:80:cd:b9:3c:82:8a:dd:60:dd:ba:58:8b:16:3b:b5:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:7a:51:a5:24:08:4e:da:78:c6:aa:a1:d1:c9:38:c6:92:6d:24:29
Fingerprint (sha256): 4b:de:33:ec:1d:e1:83:16:91:af:d5:60:29:e6:8d:7b:c1:29:4f:b3:7b:ad:21:32:93:02:07:ac:74:27:12:45

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fineounce.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fineounce.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affirmdignity.com
bibleplayers.com
cleaniv.com
fineounce.com
flyoverwellness.com
harleystreetliposuction.com
hemphaze.com
hollanddiving.com
ladyboytrip.com
lgbtqshops.com.buzzsproyt.com.restorationpac.store.disasterinterpretingsystems.com
stevensvillewaste.com
worldlifemusic.net.seekingarbitrage.com

Other certificates including the domain name fineounce.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for fineounce.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygE+kxqC0KZKp6ZcT6e+
hnsYHYoyC+Q93NVHRRj3+/Edc9Zcqe/grN851PrQiJAEa+8edpXbMxF0I5B+nYVD
c3/iyGiRXlrn/3/EJ3XpZQUVDY/BlfHdgPtjMXPi4K7jb04Iuy+Bl8GFgUH3tmWa
jJjTo/w7xR1xpwZuyRQRrnax3DDHBzsU3OtyhjqflugFao3PO8SJXCikpJYzkPjE
rmwUQfjDp5RhTwwOcZwJmUZhSH/Iun6RzHX8YlqkDgpfVjlnoZrhjd9meJIgDZDH
KJd7LKmescJiGTc99EVffxmVDXqLUYf7G/wzjsQvr0Vihp87dRwrs0MvOhs78O+K
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354296385706849895253328036610559845181466
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 01:38:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 01:38:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fineounce.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25500751255494420387582291916878900162542209524198030005734939373401736893624869158998312464204587407250316274853880574677149940226164020884624299815496664751352565640988490156467355370028932886772962508982640593150316597371282434830075698139505502292220842398409016572293364118504969560470921271077223239777229543964173955335408270941763394749290516800410215954099591598336325807754714757073749569874470257896606718174485114598512487797438347741013048845341741071200267608083689419579216318751893471030674137258532952273209127396187690933531595618375517953643536592567485762946549961936304247286522860821861427546627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ac93d0980cdb93c828add60ddba588b163bb518
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (317 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affirmdignity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibleplayers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleaniv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fineounce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyoverwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harleystreetliposuction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemphaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollanddiving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladyboytrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqshops.com.buzzsproyt.com.restorationpac.store.disasterinterpretingsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevensvillewaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldlifemusic.net.seekingarbitrage.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a9bda35f60000040300473045022100c11b36409656da2ea9dba0182702745c622868f24b022a7a3d8f8b6ac5ee2e27022010cf4648e68855853d2f1a2bd4e2d9b9727916563cefaca68830e4ecb31a5f7c0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a9bda36030000040300483046022100b7b167daf9261470728768bdd17c352565f6c00200ff55e1086879301f86d68702210099efd35b0c453c1341bfb4fe20eb51e3c8290ed9f04f64962cd37d14c348f0db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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