fineounce.com
Issued by R3
About this certificate
This digital certificate with serial number 04:11:2e:f9:d7:93:d0:4f:59:c0:0e:08:32:29:79:d9:a8:1a was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=fineounce.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:11:2e:f9:d7:93:d0:4f:59:c0:0e:08:32:29:79:d9:a8:1aSerial Number (int): 354296385706849895253328036610559845181466
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 0a:c9:3d:09:80:cd:b9:3c:82:8a:dd:60:dd:ba:58:8b:16:3b:b5:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 9c:7a:51:a5:24:08:4e:da:78:c6:aa:a1:d1:c9:38:c6:92:6d:24:29
Fingerprint (sha256): 4b:de:33:ec:1d:e1:83:16:91:af:d5:60:29:e6:8d:7b:c1:29:4f:b3:7b:ad:21:32:93:02:07:ac:74:27:12:45
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate fineounce.com
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fineounce.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
affirmdignity.com
bibleplayers.com
cleaniv.com
fineounce.com
flyoverwellness.com
harleystreetliposuction.com
hemphaze.com
hollanddiving.com
ladyboytrip.com
lgbtqshops.com.buzzsproyt.com.restorationpac.store.disasterinterpretingsystems.com
stevensvillewaste.com
worldlifemusic.net.seekingarbitrage.com
bibleplayers.com
cleaniv.com
fineounce.com
flyoverwellness.com
harleystreetliposuction.com
hemphaze.com
hollanddiving.com
ladyboytrip.com
lgbtqshops.com.buzzsproyt.com.restorationpac.store.disasterinterpretingsystems.com
stevensvillewaste.com
worldlifemusic.net.seekingarbitrage.com
Other certificates including the domain name fineounce.com
(limited to 100 certificates)
syllabus.marketing
trailerupholstery.ca
homeschoolingaroundtheworld.org
newjerseyassembly.org
www.fineounce.com
partntrap.org
fineounce.com
purcahse.ogden.gold
acluvsamerica.org
sexerencontres.be
register.cubscoutpack136.org
thingswithstuffllc.com
tukwilawa.com.fineounce.com
rocketclutch.org
mumahhid.org
homeschoolingaroundtheworld.org
enerpactoolsgroup.co.za
trailerupholstery.ca
homeschoolingaroundtheworld.org
newjerseyassembly.org
www.fineounce.com
partntrap.org
fineounce.com
purcahse.ogden.gold
acluvsamerica.org
sexerencontres.be
register.cubscoutpack136.org
thingswithstuffllc.com
tukwilawa.com.fineounce.com
rocketclutch.org
mumahhid.org
homeschoolingaroundtheworld.org
enerpactoolsgroup.co.za
Certificate
The complete raw certificate details for fineounce.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGDCCBQCgAwIBAgISBBEu+deT0E9ZwA4IMil52agaMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MTYwMTM4MDNaFw0yMzEyMTUwMTM4MDJaMBgxFjAUBgNVBAMT DWZpbmVvdW5jZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK AT6TGoLQpkqnplxPp76GexgdijIL5D3c1UdFGPf78R1z1lyp7+Cs3znU+tCIkARr 7x52ldszEXQjkH6dhUNzf+LIaJFeWuf/f8QndellBRUNj8GV8d2A+2Mxc+LgruNv Tgi7L4GXwYWBQfe2ZZqMmNOj/DvFHXGnBm7JFBGudrHcMMcHOxTc63KGOp+W6AVq jc87xIlcKKSkljOQ+MSubBRB+MOnlGFPDA5xnAmZRmFIf8i6fpHMdfxiWqQOCl9W OWehmuGN32Z4kiANkMcol3ssqZ6xwmIZNz30RV9/GZUNeotRh/sb/DOOxC+vRWKG nzt1HCuzQy86Gzvw74oDAgMBAAGjggNAMIIDPDAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFArJPQmAzbk8gordYN26WIsWO7UYMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv MIIBRgYDVR0RBIIBPTCCATmCEWFmZmlybWRpZ25pdHkuY29tghBiaWJsZXBsYXll cnMuY29tggtjbGVhbml2LmNvbYINZmluZW91bmNlLmNvbYITZmx5b3ZlcndlbGxu ZXNzLmNvbYIbaGFybGV5c3RyZWV0bGlwb3N1Y3Rpb24uY29tggxoZW1waGF6ZS5j b22CEWhvbGxhbmRkaXZpbmcuY29tgg9sYWR5Ym95dHJpcC5jb22CUmxnYnRxc2hv cHMuY29tLmJ1enpzcHJveXQuY29tLnJlc3RvcmF0aW9ucGFjLnN0b3JlLmRpc2Fz dGVyaW50ZXJwcmV0aW5nc3lzdGVtcy5jb22CFXN0ZXZlbnN2aWxsZXdhc3RlLmNv bYInd29ybGRsaWZlbXVzaWMubmV0LnNlZWtpbmdhcmJpdHJhZ2UuY29tMBMGA1Ud IAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAtz77JN+c Tbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGKm9o19gAABAMARzBFAiEAwRs2 QJZW2i6p26AYJwJ0XGIoaPJLAip6PY+LasXuLicCIBDPRkjmiFWFPS8aK9Ti2bly eRZWPO+spogw5OyzGl98AHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS 61IAAAGKm9o2AwAABAMASDBGAiEAt7Fn2vkmFHByh2i90Xw1JWX2wAIA/1XhCGh5 MB+G1ocCIQCZ79NbDEU8E0G/tP4g61HjyCkO2fBPZJYs030Uw0jw2zANBgkqhkiG 9w0BAQsFAAOCAQEAKc5koHgx7F2b/edLdKZkMrdjcCiQJ/FrEjFAtx5LjN6TgKm1 L+j2QFZ+64kIg7Tc276Brae/aySjnSyU6RPuv/nVvflHe9/mNPqxrw/bCnw18kz+ 3yCzaiJr9wNaEi+zLk2IsItCxJTYgk/T0S3u7QDd770nuKOdKBOGdgTaSfC5NdBG pdwcXLaa3yKOek0nhz6ummd1PG4IUfo+eqGuuqq0bwsFZkQ2kyMwLn6G82yF0/Sz GjI+1Ff4A8g4+aQVgJ80U57Y4SfWHBi3sOkWN7gx4ChnLg892UJbEHsymDK4os/0 9IDAHxFYyJwBdx494gf8rPsgLp+N2FZvmRuYBQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygE+kxqC0KZKp6ZcT6e+ hnsYHYoyC+Q93NVHRRj3+/Edc9Zcqe/grN851PrQiJAEa+8edpXbMxF0I5B+nYVD c3/iyGiRXlrn/3/EJ3XpZQUVDY/BlfHdgPtjMXPi4K7jb04Iuy+Bl8GFgUH3tmWa jJjTo/w7xR1xpwZuyRQRrnax3DDHBzsU3OtyhjqflugFao3PO8SJXCikpJYzkPjE rmwUQfjDp5RhTwwOcZwJmUZhSH/Iun6RzHX8YlqkDgpfVjlnoZrhjd9meJIgDZDH KJd7LKmescJiGTc99EVffxmVDXqLUYf7G/wzjsQvr0Vihp87dRwrs0MvOhs78O+K AwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 354296385706849895253328036610559845181466 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 01:38:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 01:38:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fineounce.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25500751255494420387582291916878900162542209524198030005734939373401736893624869158998312464204587407250316274853880574677149940226164020884624299815496664751352565640988490156467355370028932886772962508982640593150316597371282434830075698139505502292220842398409016572293364118504969560470921271077223239777229543964173955335408270941763394749290516800410215954099591598336325807754714757073749569874470257896606718174485114598512487797438347741013048845341741071200267608083689419579216318751893471030674137258532952273209127396187690933531595618375517953643536592567485762946549961936304247286522860821861427546627 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0ac93d0980cdb93c828add60ddba588b163bb518 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (317 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affirmdignity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibleplayers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleaniv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fineounce.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyoverwellness.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harleystreetliposuction.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemphaze.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollanddiving.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladyboytrip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqshops.com.buzzsproyt.com.restorationpac.store.disasterinterpretingsystems.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevensvillewaste.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldlifemusic.net.seekingarbitrage.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a9bda35f60000040300473045022100c11b36409656da2ea9dba0182702745c622868f24b022a7a3d8f8b6ac5ee2e27022010cf4648e68855853d2f1a2bd4e2d9b9727916563cefaca68830e4ecb31a5f7c0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a9bda36030000040300483046022100b7b167daf9261470728768bdd17c352565f6c00200ff55e1086879301f86d68702210099efd35b0c453c1341bfb4fe20eb51e3c8290ed9f04f64962cd37d14c348f0db . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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