liirn.app

Issued by R3

About this certificate

This digital certificate with serial number 04:af:5b:bb:dc:46:10:cd:77:75:63:b5:43:3f:2e:13:e2:03 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=liirn.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:af:5b:bb:dc:46:10:cd:77:75:63:b5:43:3f:2e:13:e2:03
Serial Number (int): 408120493113015475383230160616843904279043
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: da:4c:e6:16:99:15:f3:e4:83:60:e0:97:cc:72:27:b9:b2:01:15:bd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:b2:f0:e1:4b:b4:e8:ce:11:1a:9d:a8:b5:f0:fa:80:7a:22:b1:ad
Fingerprint (sha256): 4e:b9:dc:2f:31:c1:84:df:08:1d:27:46:f7:fa:46:97:e9:cc:df:46:58:03:69:0a:7d:f4:a4:2c:4d:11:8a:06

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate liirn.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for liirn.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

liirn.app

Other certificates including the domain name liirn.app

(limited to 100 certificates)

Certificate

The complete raw certificate details for liirn.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirijy+fEKtMiorH5AMhE
C8sgv6xTMEUKa9pcYNeb1tCC4x/IPy/OGyVXmL2xiQFKDV0h4RUKEoze44QhCDSY
bt1voNTFXOvwpy3/8ra712mIqGXknrEHhGogAAWJesK5Q51q17mrORuwHfTF+TnA
cKglz4bdnlwrNu8Rm2DcHZKYxnyGgeSuVFbWBf654GbNlqxH79ZMkx4KA2+PjF6v
fE4sJMtl21Vmfzg7EqVmV9mA4lalzWVyOAKA8zuEpWZpnVgV2tRiBGhwEFPXmVJc
I+aS4dp9HhzzLjfNUsp/Yz0ESBgxl8cDpdzEyyqZlm8hdJviFKP+6TMLzKtXs3qT
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408120493113015475383230160616843904279043
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 03:05:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-16 03:05:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'liirn.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17511935378991320434388606952159309137036608374390933339367143873056487601013416628761012849432323191969297219243648252706129322429448744717901926343277007731036257220322368148811200465837648202465899742779040940192903543525210212823768928692081390509284822791683971170094229259956466526474024669628274581017698141201458710363016245077545926516582035663920441347997937700562485711574171832202277199314554735408396356639154326677227965203197046869212115959217549423497157067174952958357162649352490420470084558724992785249765119558313232991349233007876886061908813940720591464761315031182075733045981820786468076557083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da4ce6169915f3e48360e097cc7227b9b20115bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liirn.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f89dfee15000004030047304502207f291b2cfd8bddd36b8bc9b848c5b97ea5f861da751b5cbed5f77af83d988ba4022100d6a67006723e301542bdddac3778e2d951ae4e85363cf6af784d56f9384c30a100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f89dfeec400000403004730450221008b3b778019c32b15b008a463e9509ea9a276e879e357acec5a5a343787648f9202207f496c7b2adbfc194611701d676de9397f16d42506b4b1e6368c7168a4ce4d4c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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