exacttimes.com
Issued by R3
About this certificate
This digital certificate with serial number 04:36:fb:34:f6:fb:48:1b:37:c2:15:96:58:a9:8d:6e:9f:a2 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=exacttimes.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:36:fb:34:f6:fb:48:1b:37:c2:15:96:58:a9:8d:6e:9f:a2Serial Number (int): 367158302776531668423059285872661555486626
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 9a:46:55:85:db:a9:2f:e6:fd:d8:31:1f:f7:3c:75:91:d1:87:26:8c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 97:37:92:eb:91:dc:74:b5:54:e9:1a:9a:fc:32:dd:21:ec:69:ea:1f
Fingerprint (sha256): 54:4f:8c:36:aa:02:e2:ab:a4:e3:50:64:e6:f8:3d:db:67:bd:f2:d3:6e:69:cd:9a:86:c4:1b:6c:66:48:ee:ca
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate exacttimes.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for exacttimes.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
exacttimes.com
www.exacttimes.com
www.exacttimes.com
Other certificates including the domain name exacttimes.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for exacttimes.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISBDb7NPb7SBs3whWWWKmNbp+iMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDQyMDA5MDZaFw0yNDAzMDMyMDA5MDVaMBkxFzAVBgNVBAMT DmV4YWN0dGltZXMuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA ykGwMwJKO3FVHKOFU9XOUwCmHRbxEY2v3CAtp1wVXnjyXqvPqCaAGh2yLUPxpziK ITPwkTT2t6CFnlBnF9SvZFXuhNY/hL5X9LMTf86qMfU7BubaFGcdbZiv38gBFaGA w9PcJ3zJXcTVbGI7pJeUXuUzhUf0iUcMyzw9QWLSNgOqOY3Ncv2vNtEbDIGIix5Y lJh2vPk+OUB2A3AOQ6TfOUlSSXYEKWtEhDa4YNnzN962EMC5E2JdmVXXcJ0HV4gX ml4FWjK6jET3WBUoK2Xdp6PZZu/daBuQFh0Dqx/BonoT75sBj0mZ12ZxB20kV6Bg 6QC31nB6seJ1HHKcxtDiejV5FaPEL29zLqnenyb3cfzjESziwPtj/x0DaTMuKNwZ mXFKwO5ATe/PM7KkAHdPtqLEawCnfKhmqlCop01mqAaeLTlw1ETXhv6GFd+jNW8I 14mz3xgcLPOhatiCpzvgbLI7Y7unu6aE4OzphaYG2H/8N5PQFCTF8WDM4UFazPWt WkUns+hWy17CzEsHJ7pBnI3/Yiq4BYeO708e5DHwqzyy59uK1Y3j74OFxwqm0RHj Y+wQe6O8XniWP/tCbSHZIbRt8yVMKTbn2DDQyvYF6o1+MZPrQM+Phd1lkAu0w5we tBzCMe5/c699E+sTGBfqCScBOkXHiuVE84jDO8Q5DwkCAwEAAaOCATEwggEtMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUmkZVhdupL+b92DEf9zx1kdGHJowwHwYDVR0j BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6 Ly9yMy5pLmxlbmNyLm9yZy8wLQYDVR0RBCYwJIIOZXhhY3R0aW1lcy5jb22CEnd3 dy5leGFjdHRpbWVzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATATBgorBgEEAdZ5 AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwSSes1ZUWFvQ3xTvLFBzDJS 2L74EvsJAnjXP/Fhp4vcWkyIdgvdKH6tPx/W9OMRDsagJ1v/rYWDpWrgz14S066I aV5NMWB0uuOOf6asw0HvqSKGkHIgSxYYogd6xYiTcOAZnDjPLPGAMerirNHA50Y/ aAssB2EIrsaAeYf7X6JInNt9KC7R4cBuQHE9eiHJwYKewMRAcyQS0+1IKaDwDv4b rm9Iac3ozfvEQokoil26EUOOSfC5vrXIzskbEj1vjPPiiiAqpiEmWsdy8tGQoth7 lDuTz4Ogfgu/uqDtWiYmHOfdB9fMlS8icBATUMRbOO/0KoY9wiZdLzJ/0EdWYw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAykGwMwJKO3FVHKOFU9XO UwCmHRbxEY2v3CAtp1wVXnjyXqvPqCaAGh2yLUPxpziKITPwkTT2t6CFnlBnF9Sv ZFXuhNY/hL5X9LMTf86qMfU7BubaFGcdbZiv38gBFaGAw9PcJ3zJXcTVbGI7pJeU XuUzhUf0iUcMyzw9QWLSNgOqOY3Ncv2vNtEbDIGIix5YlJh2vPk+OUB2A3AOQ6Tf OUlSSXYEKWtEhDa4YNnzN962EMC5E2JdmVXXcJ0HV4gXml4FWjK6jET3WBUoK2Xd p6PZZu/daBuQFh0Dqx/BonoT75sBj0mZ12ZxB20kV6Bg6QC31nB6seJ1HHKcxtDi ejV5FaPEL29zLqnenyb3cfzjESziwPtj/x0DaTMuKNwZmXFKwO5ATe/PM7KkAHdP tqLEawCnfKhmqlCop01mqAaeLTlw1ETXhv6GFd+jNW8I14mz3xgcLPOhatiCpzvg bLI7Y7unu6aE4OzphaYG2H/8N5PQFCTF8WDM4UFazPWtWkUns+hWy17CzEsHJ7pB nI3/Yiq4BYeO708e5DHwqzyy59uK1Y3j74OFxwqm0RHjY+wQe6O8XniWP/tCbSHZ IbRt8yVMKTbn2DDQyvYF6o1+MZPrQM+Phd1lkAu0w5wetBzCMe5/c699E+sTGBfq CScBOkXHiuVE84jDO8Q5DwkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 367158302776531668423059285872661555486626 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 20:09:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 20:09:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exacttimes.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825134917345717043164356915192816032176246830618360774710158105105643938292043207872235890413838761448180098976017670111924260271627155391608070966530930714736927236492669604708249932762147093546654791112082124220454913911538995306326122731569090212939961474204410059089073343853602564780114951503669658817803785558398850107274151091415444915158221534293586030931727337168022291471234139850032291726401647206914983307359136814479134313122524362819546067005359452525126209004082703116610443170687278745549895614433027902814153974939589391314948019461711155888343667547567243678894581500248806818062765654780882754207462804240555578416704200519344491071480552047170081406666968633681716646769544138256828143081031935725973013191862853942551812275841143772330425407534317183079825839625374031631598515894181935076538016656257232003532666675830221500264820160242268477293398519192814388133561500122891942362425821035201601302674822834440494227088792901132942334462885500416261343743505839864726879532523389610582210670153610615730598475151571396469093153251981642019151369766106037847692919101846941951607216596510503687342262624717913198498556447891974100952677030649499089734806471427324050287098626346286516471596851617153736423051017 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9a465585dba92fe6fdd8311ff73c7591d187268c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exacttimes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exacttimes.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009b04927acd5951616f437c53bcb141cc3252d8bef812fb090278d73ff161a78bdc5a4c88760bdd287ead3f1fd6f4e3110ec6a0275bffad8583a56ae0cf5e12d3ae88695e4d316074bae38e7fa6acc341efa922869072204b1618a2077ac5889370e0199c38cf2cf18031eae2acd1c0e7463f680b2c076108aec6807987fb5fa2489cdb7d282ed1e1c06e40713d7a21c9c1829ec0c440732412d3ed4829a0f00efe1bae6f4869cde8cdfbc44289288a5dba11438e49f0b9beb5c8cec91b123d6f8cf3e28a202aa621265ac772f2d190a2d87b943b93cf83a07e0bbfbaa0ed5a26261ce7dd07d7cc952f2270101350c45b38eff42a863dc2265d2f327fd0475663