assenteisti.com
Issued by R3
About this certificate
This digital certificate with serial number 03:df:f9:6b:85:9d:00:eb:88:3d:a7:f1:dc:ea:c8:2c:71:f2 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=assenteisti.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:df:f9:6b:85:9d:00:eb:88:3d:a7:f1:dc:ea:c8:2c:71:f2Serial Number (int): 337551361675363908112472008266368898855410
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b9:42:7e:19:e3:96:94:6a:0e:3a:ec:4d:0a:fb:7a:cc:6d:98:61:ae
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 68:ea:9d:2c:80:d8:b6:95:e4:d7:23:da:f6:22:8d:4b:18:e7:dc:2a
Fingerprint (sha256): 54:10:3c:ba:a8:42:8a:aa:83:2f:87:4d:27:13:7c:ca:8a:30:7c:0d:58:0f:95:5e:cf:23:57:1d:9b:58:31:db
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate assenteisti.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for assenteisti.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
assenteisti.com
Other certificates including the domain name assenteisti.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for assenteisti.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgISA9/5a4WdAOuIPafx3OrILHHyMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMTAxMDE2MzdaFw0yNDAyMDgxMDE2MzZaMBoxGDAWBgNVBAMT D2Fzc2VudGVpc3RpLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB AMPNmweHuJFWNq7SzQ4vfksDVQWdVxbJcDksD22visqH1rri/d2XIPHgrvND5UzX 3S2LRf3seI8UPxXcfA1ODc2h7tUuw8Wojw0TDX9RVqYMX6I03B3XnNLQVO0ZCsXV Ye8aVhpIZz5bVS6trlb92oCrt6m6tyCXwZy/jMqgbIzXWur3XL9fEf3aPy7hDHOy L3mmMpXpPP/f2JJqV94Bp3I/VkqDGjv6R/dmwGaaB0ErzsUdc6VoxcVhGcDkBPul /VbiTjPWTqzm7fW4GUmHmlFl4txIo0jCB3xFutrpmv9O/z3pZMc1u89BNdA77bNQ E7ZcO3SesBW05nwfC2JT39lPaD7/6BKoaKctrflTWJseVxTg/ULG9Wtc9uFafn34 jGD9uMYg7At7APj6MtH9SdGy4zaCpmCpBnwG063c7HC0ob0d9LVHOGYtPJWAcXQ6 X4K3XObgVwPDom0hxty7zhfjoUgrE4SzVLhEq9RZeX4mwUL0uL6lQ8Y3GUSz5khH 28OcSJIYm1a/o9uo9sXqx7a6M3n2mNe0nX4qrtlL+qaohYimqdm6KG4vBdyXWj13 or9ftfpdCKCVxclTbzEPAEagsKoLwN7etF5fJ/vdxdcmq4rFmGR5FMEzTUhFuJAA mMZCjhkASpAUeaelSzG9UjXtxtWhqGgVN6ctx20f6wBbAgMBAAGjggISMIICDjAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFLlCfhnjlpRqDjrsTQr7esxtmGGuMB8GA1Ud IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw Oi8vcjMuaS5sZW5jci5vcmcvMBoGA1UdEQQTMBGCD2Fzc2VudGVpc3RpLmNvbTAT BgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AEiw 42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi7jyvZcAAAQDAEgwRgIh AJIomts8Lt9wZuiv92FvJWRC3+RlQfB8ShfmIVGi0ITVAiEAxslwU040Y+TZlT2X 7y3jEs9v0cdKrsXUrjse0gIJLcEAdgDuzdBk1dsazsVct520zROiModGfLzs3sNR SFlGcR+1mwAAAYu48r2dAAAEAwBHMEUCIHEx2TyDxG8r/Mk/1F1e1w9dq0p+Ap4G XN+8ZMbcfbFdAiEAjLRodPZBX2aDPOeuPj4viNbDzRO01vHZ5fHvniXO7GIwDQYJ KoZIhvcNAQELBQADggEBAALooCMfZRbL/CUYEqKOjkE+PiGLl+5MGi/BBz3g4JoI 5O3DmDSzwYwOTSZVA6r9KpsTOUCeb+6E4fJX9GF3ujAuqtrcBTiOVXO3Fm+D8Nvr P6oKZE+A6/ZS6PlbPQHj1l0MwvovDdjaU0EuuzIjfphL8wxMo6D/7C1eIqPMDgrP qlovW1wpw1n6oTmJvA5e1ZYxLTnzI+BMy9x3LHzqPwJNEBPRT+tg0+Y8y4mJX59i K6hVd95rbP9aCPAhTCH6m4QfJD4zKo9BbsvHicIxWK206stkhbHEs0iWSHM8vI7n VXI9es6Wdu8dzZ3rne2Gj0mVFW0fGqbnCitmuGd/fa0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw82bB4e4kVY2rtLNDi9+ SwNVBZ1XFslwOSwPba+KyofWuuL93Zcg8eCu80PlTNfdLYtF/ex4jxQ/Fdx8DU4N zaHu1S7DxaiPDRMNf1FWpgxfojTcHdec0tBU7RkKxdVh7xpWGkhnPltVLq2uVv3a gKu3qbq3IJfBnL+MyqBsjNda6vdcv18R/do/LuEMc7IveaYylek8/9/YkmpX3gGn cj9WSoMaO/pH92bAZpoHQSvOxR1zpWjFxWEZwOQE+6X9VuJOM9ZOrObt9bgZSYea UWXi3EijSMIHfEW62uma/07/PelkxzW7z0E10Dvts1ATtlw7dJ6wFbTmfB8LYlPf 2U9oPv/oEqhopy2t+VNYmx5XFOD9Qsb1a1z24Vp+ffiMYP24xiDsC3sA+Poy0f1J 0bLjNoKmYKkGfAbTrdzscLShvR30tUc4Zi08lYBxdDpfgrdc5uBXA8OibSHG3LvO F+OhSCsThLNUuESr1Fl5fibBQvS4vqVDxjcZRLPmSEfbw5xIkhibVr+j26j2xerH trozefaY17Sdfiqu2Uv6pqiFiKap2boobi8F3JdaPXeiv1+1+l0IoJXFyVNvMQ8A RqCwqgvA3t60Xl8n+93F1yarisWYZHkUwTNNSEW4kACYxkKOGQBKkBR5p6VLMb1S Ne3G1aGoaBU3py3HbR/rAFsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 337551361675363908112472008266368898855410 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-10 10:16:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 10:16:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assenteisti.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798807146387729925028697977766837099729930721775711247716431188628523993092510608702505676870193088117170048800102868235269977536312677210207682336406105120850078023054572077315809708321803565724374839143848484708334176991186975896665440242861103490694366109663346035741334111464985268455376685344643220380337776459565196287943481035188727350781974160509236922056423436798682764725568144101492926012207053959295902853962514101896998776081364116621603410912004712510748380112967659214475045697660697985039545030988218405585002598232426144443710381764246043540359068519791123672194410755966533803252626139416512081757538624895691408403548938418259366626664812775307263690849356425756985588327037794179525444277401577029597096814257919898393295376723409339248335421504516233065503426635020171466480277297509258301486868845685714675170603090815712166220766975597500532978289441246299663133463400550250475429667580423050281890367536503259729637238853311420132136685430389982947270897648314598618652788022090051442379011112918078769182468759158662736650453415960532104257108309157573140653257334438471361836207405259768338879484313421047166040548359006070969973885377772916716858265605191409491283970493819947429401684435643671519309791323 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b9427e19e396946a0e3aec4d0afb7acc6d9861ae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assenteisti.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bb8f2bd97000004030048304602210092289adb3c2edf7066e8aff7616f256442dfe46541f07c4a17e62151a2d084d5022100c6c970534e3463e4d9953d97ef2de312cf6fd1c74aaec5d4ae3b1ed202092dc1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bb8f2bd9d000004030047304502207131d93c83c46f2bfcc93fd45d5ed70f5dab4a7e029e065cdfbc64c6dc7db15d0221008cb46874f6415f66833ce7ae3e3e2f88d6c3cd13b4d6f1d9e5f1ef9e25ceec62 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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