trophies.cool
Issued by R3
About this certificate
This digital certificate with serial number 03:31:81:14:40:7c:5e:39:fc:07:c8:d0:a6:bb:3b:8a:2b:6a was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=trophies.cool
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:31:81:14:40:7c:5e:39:fc:07:c8:d0:a6:bb:3b:8a:2b:6aSerial Number (int): 278182269339727817969084776597596387552106
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: eb:e2:be:ca:94:64:32:c8:cc:99:e6:42:90:e7:d7:78:c1:bd:c3:ad
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 3b:ba:20:e5:3f:3d:f5:92:e9:64:d2:51:30:3e:bc:fe:0e:8f:5d:39
Fingerprint (sha256): 4d:58:c7:87:b8:b2:4d:b9:6c:87:e2:e8:ea:d7:1c:95:59:87:90:b1:f0:ca:2b:c7:e7:69:03:71:d6:87:1d:3b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate trophies.cool
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for trophies.cool
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aristocrasea.com
collegetour.com
drakeequity.com
flesh-land.com
freezedriedkakaduplum.com
genderequities.com
homeslahabra.com
leanbeautiful.com
muniwifi.com
ticketholidays.com
trophies.cool
vestemica.com
collegetour.com
drakeequity.com
flesh-land.com
freezedriedkakaduplum.com
genderequities.com
homeslahabra.com
leanbeautiful.com
muniwifi.com
ticketholidays.com
trophies.cool
vestemica.com
Other certificates including the domain name trophies.cool
(limited to 100 certificates)
trailerupholstery.ca
balmorallaw.ca
sculpit.gold
balmorallaw.ca
34725625397.ca
arvada.work
balmorallaw.ca
justwanna.world
balmorallaw.ca
trophies.cool
advocates.club
justwanna.world
justwanna.world
justwanna.world
real.finance
trailerupholstery.ca
travel-ready.life
cla.bible
military-biodefensevaccines.org
allanblock.ae
musicoldies.ca
chicago.world
trophies.cool
propertyblockchain.org
allanblock.ae
allanblock.ae
tangomaine.org
balmorallaw.ca
grocer.cc
justwanna.world
justwanna.world
quiz.simplifiedfor.com.trophies.cool
thynk.capital
real.finance
trailerupholstery.ca
advocates.club
real.finance
balmorallaw.ca
sculpit.gold
balmorallaw.ca
34725625397.ca
arvada.work
balmorallaw.ca
justwanna.world
balmorallaw.ca
trophies.cool
advocates.club
justwanna.world
justwanna.world
justwanna.world
real.finance
trailerupholstery.ca
travel-ready.life
cla.bible
military-biodefensevaccines.org
allanblock.ae
musicoldies.ca
chicago.world
trophies.cool
propertyblockchain.org
allanblock.ae
allanblock.ae
tangomaine.org
balmorallaw.ca
grocer.cc
justwanna.world
justwanna.world
quiz.simplifiedfor.com.trophies.cool
thynk.capital
real.finance
trailerupholstery.ca
advocates.club
real.finance
Certificate
The complete raw certificate details for trophies.cool in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAzGBFEB8Xjn8B8jQprs7iitqMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMTgwODM2MzJaFw0yNDA1MTgwODM2MzFaMBgxFjAUBgNVBAMT DXRyb3BoaWVzLmNvb2wwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG JbdxIdPFsFr0KkevLRS7TP28Ffg/rfMwvwXpHwBhtSmWFM9rsSqjWR+pM8juU52v W6XNkbBS9SaAofvbndX4tLGi60nKxCMqruGBptg5uB3eBw6vP84wPVbii8lFDm91 in5JF+QljiGLrw8m2sZd2cE2tu29XmXGjjhIVB5QTWB3erk6aCplqYHLwxFZLZfM HAWr4vPyvt/X/t3azKdL56IwpqjLN1psMuUEaadDqI+wyvEv4hUBeahqONn7OxDJ f+wcSohD16eHzxvMIiSYxXxIApM1yOdDsGuhQriWoJZacswsg/bSjUkjPWDk6ciw Fj0DWpOWCMTx3k3JbnhfAgMBAAGjggLbMIIC1zAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFOvivsqUZDLIzJnmQpDn13jBvcOtMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv MIHjBgNVHREEgdswgdiCEGFyaXN0b2NyYXNlYS5jb22CD2NvbGxlZ2V0b3VyLmNv bYIPZHJha2VlcXVpdHkuY29tgg5mbGVzaC1sYW5kLmNvbYIZZnJlZXplZHJpZWRr YWthZHVwbHVtLmNvbYISZ2VuZGVyZXF1aXRpZXMuY29tghBob21lc2xhaGFicmEu Y29tghFsZWFuYmVhdXRpZnVsLmNvbYIMbXVuaXdpZmkuY29tghJ0aWNrZXRob2xp ZGF5cy5jb22CDXRyb3BoaWVzLmNvb2yCDXZlc3RlbWljYS5jb20wEwYDVR0gBAww CjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBIsONr2qZHNA/l agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY27kwuPAAAEAwBHMEUCIQDJFwyWjlGF 63TFgUd3gRbCoSE/4PkRV7y/sxeS6euyCgIgNo/MdvTqG25aHIYADfF6vcXNgj9Y YMgLf8v2MhWgUakAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAA AY27kwvnAAAEAwBHMEUCIQDQ8q1KY7Yu2s0eXAEa9bCUYSuTRTI5+e2PHHy76Zpa XQIgE93DNk9Ixs5jV2VJqqP9b+SgWAZiZzLFBnv3eyg5kd0wDQYJKoZIhvcNAQEL BQADggEBAFI7zu5FqzmaBrO0HzCoThlpLMYUldtCHCsr2V4OOuS3KVwu9vr21FHo FKLPWekWTMV3nfPPv2+7h5TYSfmHRJ3+xsQfoOJNtv7K3l0C3qVtRdpQoJc/O0hp UOErop7/Ekt90lwGDuhXSz73/4sashF6wYf/qjKbhJrhIm/a58bzBmJ0YWq/7f7T fHxpTNEepY7hAIN+1uO4D6B/3k60AY5V6D1aKOrc8A4n2y3z4i4X53AI5PB1Pqeh 9YRCudQfUrnUaXRIeUF6a1S9zAyz5O1WWL7kOJ234NqftLZSNxuyD4kZ7jPf6Vi7 CLIKDUGZTPLvoqU7akT4IptZV85dhg4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiW3cSHTxbBa9CpHry0U u0z9vBX4P63zML8F6R8AYbUplhTPa7Eqo1kfqTPI7lOdr1ulzZGwUvUmgKH7253V +LSxoutJysQjKq7hgabYObgd3gcOrz/OMD1W4ovJRQ5vdYp+SRfkJY4hi68PJtrG XdnBNrbtvV5lxo44SFQeUE1gd3q5OmgqZamBy8MRWS2XzBwFq+Lz8r7f1/7d2syn S+eiMKaoyzdabDLlBGmnQ6iPsMrxL+IVAXmoajjZ+zsQyX/sHEqIQ9enh88bzCIk mMV8SAKTNcjnQ7BroUK4lqCWWnLMLIP20o1JIz1g5OnIsBY9A1qTlgjE8d5NyW54 XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 278182269339727817969084776597596387552106 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 08:36:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 08:36:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trophies.cool' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25013783117135558061871920852324304581374627604912144361370969087651994544780396026090915817260549753425559314958124571360068771917624526857986872299485591369246022499336956166082189820631674026737858838088699004929898051138710170406777991624627825810474856924502791037217879489511546354640752511605218357931671871789943819164547915515966023498124879486976652871288239023005817947933028722915900385520125582885473169243240295384910935861309340675936854884678664668417196727459630129423199998228387716898878136906864516020664825888022586946493832622733667047277286553383128344094890591328703207581578199845435241035871 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ebe2beca946432c8cc99e64290e7d778c1bdc3ad . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (219 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aristocrasea.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegetour.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drakeequity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flesh-land.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freezedriedkakaduplum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genderequities.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeslahabra.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leanbeautiful.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muniwifi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketholidays.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trophies.cool' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vestemica.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dbb930b8f0000040300473045022100c9170c968e5185eb74c58147778116c2a1213fe0f91157bcbfb31792e9ebb20a0220368fcc76f4ea1b6e5a1c86000df17abdc5cd823f5860c80b7fcbf63215a051a900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dbb930be70000040300473045022100d0f2ad4a63b62edacd1e5c011af5b094612b93453239f9ed8f1c7cbbe99a5a5d022013ddc3364f48c6ce63576549aaa3fd6fe4a05806626732c5067bf77b283991dd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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