www.theartoflivinganddying.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5d:a1:fa:ce:43:94:4b:54:5e:eb:2e:db:60:da:a4:4b:c4 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.theartoflivinganddying.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:5d:a1:fa:ce:43:94:4b:54:5e:eb:2e:db:60:da:a4:4b:c4
Serial Number (int): 293198425883994582294429755906436219816900
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:2d:c3:12:8e:96:aa:d7:2b:12:f0:bd:44:bc:47:8d:ba:4a:6b:4f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 62:f1:28:d8:d0:e5:19:16:e1:28:3b:70:4b:59:ee:65:b8:43:e9:fe
Fingerprint (sha256): 53:2c:10:0a:38:e0:9a:76:aa:af:8e:ab:f8:2c:87:24:20:0d:cd:cb:cf:0d:0e:85:ea:03:26:d6:d5:02:df:0e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.theartoflivinganddying.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.theartoflivinganddying.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.theartoflivinganddying.com
cpanel.theartoflivinganddying.com
cpcalendars.theartoflivinganddying.com
cpcontacts.theartoflivinganddying.com
mail.theartoflivinganddying.com
theartoflivinganddying.com
theartoflivinganddying.nandiszabo.com
webdisk.theartoflivinganddying.com
webmail.theartoflivinganddying.com
www.theartoflivinganddying.com
www.theartoflivinganddying.nandiszabo.com

Other certificates including the domain name theartoflivinganddying.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.theartoflivinganddying.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP81sTofLc5HqD6FfoBM
GBRr12w5mE+fNzDHlGN1pIA2gkKBXDtTF0T3uO+gX5QTLrQVL5c8Wbzlhao+u79+
NGdHhtgvXhlIvIU70RR0AUMl72JOvIcE50Lo50/H9OAeRctlHdUMPIkV2giCHONF
HmUFCP6aXIVqsGwIqs+JX4L9LF/+E8ymFWXkVKcbbI5Nnzz7leX746VJ3YuErSIe
y6Sm8Fu9um7r9l/9YDNP0qRZYvTKILiRMYyKVvIKWcKwN5x7r1lnqt4PBlvJu16+
AZqr1VXz6pCrTViyEDqzJyXxq+TTNbeAo4GJ2iTA0RdLphRQifOpjuk18dJWBHXn
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293198425883994582294429755906436219816900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 02:11:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 02:11:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.theartoflivinganddying.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22848743504917427099834196463705224386336346821429961837986663569674438261189214812479221461010291055528112620712116646065152386075836059436562529726030484625887623313983000760238621485739351863280551311199869494890960936685400845468313393246795996745397378586005788712674082369684725311447135684366035140570472119562327968153985782098505582905744439934574443182816385920684106692694352781651905734292430015006815714337163148068069356905034588524466074520263475778180156744075646766218977652313477719495594872620920552371749962080031324117993263889467928484266768497485575105833453186118218224161089421613883528177607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							912dc3128e96aad72b12f0bd44bc478dba4a6b4f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (406 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.theartoflivinganddying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.theartoflivinganddying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.theartoflivinganddying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.theartoflivinganddying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.theartoflivinganddying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theartoflivinganddying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theartoflivinganddying.nandiszabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.theartoflivinganddying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.theartoflivinganddying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theartoflivinganddying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theartoflivinganddying.nandiszabo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e78bde46000000403004830460221008c007101c11f78871f26653f1a65fa8e74a61a267a18dd15e37af1bc9a92db730221009f2722fb0ec6f0d9ec3839427caec237542ea4074998d30fa288034e1460d94a00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e78bde4a80000040300463044022073928bd1e311414bf5d459dd89e297fc1224261fe86a2a5e1b850804e8192c2f02204650fb13e8879b3f91dbb52c2cb7d19a611b1722445b8eb87dcf11076b34439d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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