mainestemcell.com

Issued by R3

About this certificate

This digital certificate with serial number 04:0b:38:b2:64:ff:ef:86:37:30:b1:c5:2b:a3:8f:4e:81:76 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mainestemcell.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:0b:38:b2:64:ff:ef:86:37:30:b1:c5:2b:a3:8f:4e:81:76
Serial Number (int): 352267612808294355153133198594481022992758
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7d:05:20:87:18:67:04:c7:80:31:1f:be:83:71:9d:d1:83:ef:f9:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 49:c5:33:30:50:a1:ab:16:43:61:14:ed:f7:2f:d8:4c:1b:ab:53:e9
Fingerprint (sha256): 51:21:84:fa:37:81:14:07:6b:a3:8b:fd:4a:8f:57:55:bc:62:0e:c1:2e:69:cd:35:c5:a0:bc:05:40:a0:3d:f6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mainestemcell.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mainestemcell.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anb.capital
asiamotel.com
bensonmarshall.com
bronxcommercialappraisal.com
compliancesystem.org
cryptotraderintel.com
handymanforaweek.com
hempthcnull.com
mainestemcell.com
nacogdoches.email
pascagouladental.com
twoitem.com
ummahhologram.com
uzunesek.com
wateralkalinesystem.com
www.anb.capital
www.asiamotel.com
www.bensonmarshall.com
www.bronxcommercialappraisal.com
www.compliancesystem.org
www.cryptotraderintel.com
www.handymanforaweek.com
www.hempthcnull.com
www.mainestemcell.com
www.nacogdoches.email
www.pascagouladental.com
www.twoitem.com
www.ummahhologram.com
www.uzunesek.com
www.wateralkalinesystem.com

Other certificates including the domain name mainestemcell.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mainestemcell.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb/OTj2TbqeDvUTrasxT
gorjP7MasL68z211njTG36ERB0Fp9SZ2VN0djNfJMBjjDqyMABjJw95XF7RApP84
tj4fzo2PnqOK4qVziOtUCGkxSfUTmCSd9e0vVRsPH30Ox79FDmer95grsQr83XyR
GyzkuH9+xAatZLVD5H9y0Yep/fOPJwLaFDPIWBkYvEsICQYBC0b4WeOMmvIQ/pSz
BKZIVOjcsc81xaCkcgYysAvkvrfyhQSWbu7zVTU4iKSW1mXMgBVc01xFipuuR7yW
5oHnQtUsPIb55ZvijTtJxIxvexh90NSu4nmm89i+6K2kXgqeLkxu9x+5ZHZKL6qG
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352267612808294355153133198594481022992758
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 11:24:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 11:24:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mainestemcell.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25973435523295422657011453198418296340668710649271692446279170820836576877646277823416927950576194411503203215981126632546912569929717045472630474118668929450228488732444389338436783989242570120044073267762410696788978412347248120873752069473167483176829725474795942050043213368713235477532276151030563682073714527248333866216801760010147461204179862399301820319998173592656857070217075564333959827199264188387839350324856403635532513073771987672600555362000107674692703147246894075275462224209364483046151650640991961691170062437678429076001006450592847157984415944725104671943423935789082949288292321159578632488621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d052087186704c780311fbe83719dd183eff9bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (650 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anb.capital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiamotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensonmarshall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bronxcommercialappraisal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliancesystem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptotraderintel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handymanforaweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempthcnull.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainestemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nacogdoches.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pascagouladental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twoitem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ummahhologram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzunesek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wateralkalinesystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anb.capital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asiamotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bensonmarshall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bronxcommercialappraisal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compliancesystem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptotraderintel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handymanforaweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hempthcnull.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainestemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nacogdoches.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pascagouladental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twoitem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ummahhologram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uzunesek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wateralkalinesystem.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f5829cb8a000004030046304402200ebd6929b0221f63152ad38616455a59c8bb4f0423450a8ac3a2f22b8a816e6702202866ff48973a90b95de173673b384b337752b8b89094b6b7a29f3007965d6583007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f5829cc4d000004030047304502207a59c4652712b88fbc5dd49c353909767965c6f178a318aedc5f6f665f96ec9e022100f8f6048aa690730018c913d8c5f753aa722d76a8080730d7acd381d6d5ff1207
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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