www.xn--debciq6a.com

Issued by R3

About this certificate

This digital certificate with serial number 04:4d:1f:68:52:42:42:f5:e7:32:8f:1d:4e:fb:b0:53:06:ed was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.xn--debciq6a.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:4d:1f:68:52:42:42:f5:e7:32:8f:1d:4e:fb:b0:53:06:ed
Serial Number (int): 374692633715103237801960570608534047360749
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 37:f0:9e:b1:27:ba:27:2e:37:b1:7c:a5:fb:20:d6:ba:c7:b8:61:25
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 94:91:5f:58:00:36:3e:65:21:60:0b:4b:cc:79:57:3f:ed:6c:80:eb
Fingerprint (sha256): 58:93:02:7d:0a:3f:3a:a7:9e:19:56:58:1b:d8:22:82:2a:3a:e9:11:dc:09:94:0d:05:b3:da:ae:16:0d:bd:79

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.xn--debciq6a.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.xn--debciq6a.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

13thfold.com
cashbuyerofnashville.com
class1div2.org
clevelandscrapyard.com
copperc.com
copyrightattorneysusa.com
costlyfaith.org
equilifeuniversity.org
fsdsub.com
futurefounders.vc
isburningpoisonivysafe.com
jointpaintacoma.com
mountainpaddleboard.com
omschooling.org
www.13thfold.com
www.cashbuyerofnashville.com
www.class1div2.org
www.clevelandscrapyard.com
www.copperc.com
www.copyrightattorneysusa.com
www.costlyfaith.org
www.equilifeuniversity.org
www.fsdsub.com
www.futurefounders.vc
www.isburningpoisonivysafe.com
www.jointpaintacoma.com
www.mountainpaddleboard.com
www.omschooling.org
www.xn--debciq6a.com
xn--debciq6a.com

Other certificates including the domain name xn--debciq6a.com

(limited to 100 certificates)
www.xn--debciq6a.com
datastructarray.org

Certificate

The complete raw certificate details for www.xn--debciq6a.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yQz5QRlXxJa0PBI4X1o
KhzJogqaCHhUmZsyYVfEijV7gdrRbMFifdDb1eTvCkQ9W1Ql1sNXrZcHuPtzbI0g
fd9rRjM8cBcFIQp+TnQ/L8a+azofvdY0sWp2fSSM0iAeHDzlqkJiO5/lG2yGlWY4
NPpqVh9i5VBJ8z3iPM/KVZZi3W2BeSJ8hCOkl45sAmOLkD10PZRnObA/XfhtqXhm
wgpDSA7FmSinAphpqY8pZ6In6yAYospgw+xo4wZJa53TmubNIODVy81VZ2Pjhn88
Nh9d4sBGxGGK+rFgLGHSEFbRQXFEUjRgGBz3eZ5rMB0DtFCrFe3RKdBHMy0LsnVG
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374692633715103237801960570608534047360749
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 07:04:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 07:04:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.xn--debciq6a.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27159087790979839761426839937539444671117495934679490236591433256587127720321467798916498603098455008089482231979947322503325217147385539808288446394844801778779767529840900675987065744232348851325810165205740255049000224293136008834599920197371088540156703852212735371561429428956086861119785708610584431152945439185814447638926123299930228028425391039086137743309943929587814260692553421195839487422730389926555887768703341348817567055737750257048595895773824934202216769509819814423993018138872328799834561871385054084522295068895059486315391295369896856390192682069188771815078273524977294211567981068044016633453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37f09eb127ba272e37b17ca5fb20d6bac7b86125
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (666 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '13thfold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashbuyerofnashville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'class1div2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevelandscrapyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copperc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copyrightattorneysusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costlyfaith.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equilifeuniversity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsdsub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurefounders.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isburningpoisonivysafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpaintacoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainpaddleboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omschooling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.13thfold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashbuyerofnashville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.class1div2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevelandscrapyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copperc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copyrightattorneysusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.costlyfaith.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equilifeuniversity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsdsub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurefounders.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isburningpoisonivysafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpaintacoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainpaddleboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omschooling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--debciq6a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--debciq6a.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f76216ff30000040300473045022100d35aa3178f1417953c7b43feec53eb28867207301c3062ba680b477930dfc2370220486eeb0b3a56731473b96337ee57a3ead4604d43b1e7c5f205302ca7bf52ea0600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f762170230000040300473045022100fb96b789e73e5e008ecb1cc99c873c658f85839fdb5e3b70f3274943c94a108502205a0a232a9c7e81613f4d5224dc938b874653bdd90c180caaf2f568f1c3a64147
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b0866adcf9a34904e968de716f6babe932a2eb1740f1569d5f867a07b8ff7403ede58ee7688282f098cba836b9d90c904ea6f506dd53dd21b44b692ae29a161f9cacf696b01f0b3ad94b54959cc74255da4b6e21bf0a326c3d92e26b9206c3ef1c4628a9f886f1f54c4e4afff9b0e9c808951fd03490dd78c0044376b499dee3ef55856729c3d7b806e413076370509ede473e4ae268b4722bdbb77e4a77ce91f6283ed69037aa5db4aeb0d817583c92478fc7168374232dd9e67400aa773b98e97b4f95aca2956492d256adcb5effee47553d6e5e533c6b6e328af251f4b79b0bea7da9f550ba85c01607b5f46fe4569cd56ed117d5f18dd3542dbd32f765f8