*.optimumfuturist.com.np

Issued by R3

About this certificate

This digital certificate with serial number 03:d6:4a:3c:7a:a4:74:62:65:3f:60:82:3f:24:cd:e5:50:cb was issued on by Let's Encrypt.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.optimumfuturist.com.np

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:d6:4a:3c:7a:a4:74:62:65:3f:60:82:3f:24:cd:e5:50:cb
Serial Number (int): 334255961213344576497127313235453730443467
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 59:18:48:ea:c8:9d:af:09:af:c4:c2:07:69:b2:8f:8c:72:db:91:32
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7a:a8:ba:90:38:d9:9a:07:33:62:5a:a9:67:6e:43:38:75:00:5c:5a
Fingerprint (sha256): 54:17:42:af:6d:a1:e1:3d:d3:30:91:96:c3:f2:fe:3c:84:7f:be:0e:1c:58:59:08:b2:cc:d9:1f:4c:ec:4b:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.optimumfuturist.com.np

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.optimumfuturist.com.np

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cssjunction.com
*.danfecreatives.com
*.danfecreatives.com.np
*.optimumfuturist.com.np
*.poddarpuja.com.np
*.preeya.com.np
*.sarozpoddar.com.np
cssjunction.com
danfecreatives.com
danfecreatives.com.np
optimumfuturist.com.np
poddarpuja.com.np
preeya.com.np
sarozpoddar.com.np
www.cssjunction.danfecreatives.com
www.optimumfuturistnp.danfecreatives.com
www.poddarpuja.danfecreatives.com
www.preeya.danfecreatives.com
www.sarozpoddar.danfecreatives.com

Other certificates including the domain name optimumfuturist.com.np

(limited to 100 certificates)
optimumfuturist.com.np
*.optimumfuturist.com.np
optimumfuturist.com.np
optimumfuturist.com.np
*.optimumfuturist.com.np
optimumfuturist.com.np
www.intranet.optimumfuturist.com.np

Certificate

The complete raw certificate details for *.optimumfuturist.com.np in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUycjPcjYYBSLdwJ5Wi1
7fHK9Yva+bsA4UtK2E1bm+XiW3pq8hktjYo4+WFj7LZPjxzfQIzT5+FZ9vuuv575
lJGIrjzvxOSr2XdqrUPrH2D71i+hpRgClHiETPZ8qtx8XYoj36euMO+lmVlEWvE7
U9m+cePdA/uZGcEJ9EGJfO6F1d7K9McLLsdx4PuXtZY3en759mTS692asxoRu5fB
g2UG+HMCrZOmEmgu33uoQZTQEi/Qz+PcjoNu8oQSbWSSItR588IIsAgKxk2BuI0l
DfkvvsrOPKq6gnyySyczXdEFwDu33KwhBr4/z5iiJOZ3v+ZO2bIxORea3mQ/YndQ
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334255961213344576497127313235453730443467
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 06:19:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 06:19:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.optimumfuturist.com.np'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23896818190062371100133692414127000054477916491675707412967699468554174689131306806554177604620778902272921237828397275818480531487067100231078220049679868866173372550087897011427274532255352046587525976250400537148370685758599739585040882014836504926007488954895555742916353131611062439013857844554388220486289521469790025235342176777851725339036719002248432386518406103744742005806214272245707010536062881515745883988165230959306798400874328763139295619501256691770812221974978071555293862562554173794002260393407208414816724028007600637551041547623649557247202903653701491851401542549205187689693498674622978543657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							591848eac89daf09afc4c20769b28f8c72db9132
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (474 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cssjunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danfecreatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danfecreatives.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optimumfuturist.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poddarpuja.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preeya.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarozpoddar.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cssjunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danfecreatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danfecreatives.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimumfuturist.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poddarpuja.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preeya.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarozpoddar.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cssjunction.danfecreatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optimumfuturistnp.danfecreatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poddarpuja.danfecreatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preeya.danfecreatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarozpoddar.danfecreatives.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ea7f9c54b00000403004630440220530bfd8cfca4363abf41af1191d6ae94e26a06ab0012f9c77b31760d4363ced702202abd2290eec05e697e7ebde98ed3519c98da37a61385e0e542ce5c46745186340075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ea7f9c51000000403004630440220651b4752f1d885b6b57bdea55f71981eb39b5f09912dbe707cf17735021437e202206a3c47558d11863ac5ac911041972c3a000feb8a172fbf8ced69948595f572d8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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