kitesurfpuntacana.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b7:e9:8a:d0:cc:09:54:3e:ea:f6:b6:92:14:75:6a:0d:b5 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kitesurfpuntacana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:e9:8a:d0:cc:09:54:3e:ea:f6:b6:92:14:75:6a:0d:b5
Serial Number (int): 323918961836703471882704226314092450287029
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 36:cd:07:78:5d:00:b3:e8:1e:b3:d5:f4:79:d9:5e:30:df:74:97:c7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 46:34:fb:0e:6e:ff:9c:08:6c:bd:30:b7:e7:3c:b6:b8:dc:d8:42:c2
Fingerprint (sha256): 5d:48:79:2e:a5:a5:99:42:13:98:c3:21:81:cf:91:fd:a8:91:ba:45:ef:5f:e2:a6:2d:b9:b7:e4:fb:65:30:1e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kitesurfpuntacana.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kitesurfpuntacana.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alterniverse.xyz.beautybysophie.com
arbitragedirect.com
arbitragescan.com
drmitulpatel.com
freshlocally.com.cryptohostels.com
goldexchangerates.com
hempexpo.tv
ingidio.com
itcareerguidance.com
kitesurfpuntacana.com
nightcurfew.com
psiloil.com
solarraven.com.flalitigators.com
unionjackvapes.com
vaid.info

Other certificates including the domain name kitesurfpuntacana.com

(limited to 100 certificates)
fsbo.forsale
420pizza.org
bible.bible
theniv.bible
bibliacatolica.bible
awakenedrecruitment.ca
weegendumpsters.com.arbitrage5.com
www.example316.bible
suricate.ca
livelyconnection.club
test123.allstar.bid
estate.limited
lease.club
fsbo.forsale
internet.fund
protec-security.asia
420pizza.org
bastiatinstitute.org
offshore.ac
kitesurfpuntacana.com
month.vc
kitesurfpuntacana.com
fsbo.forsale
argenx.org
kitesurfpuntacana.com
erin-gee.org
miami-dade.org
satellogic.org
lakeviewcampingarea.com
museumof.bible
test123.allstar.bid
kitesurfpuntacana.com
boostinsurance.org
test123.allstar.bid
tax.exchange
series.bible
lakeviewcampingarea.com
breakthrough.bible
decorumastutefashion.org
thematch.co.za
technology.world

Certificate

The complete raw certificate details for kitesurfpuntacana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXSPeG51oJ/VdUEaoMyy
aui5gnTLM2SYy+mphwg9I4gKyHVW1IuhNedglEzmQVo7Xyh2XMY8VTQaE7hY4fzG
NlY3KqC1ZStOi7l52jB2aBtbrRgiSPM55FJcX3z0Myg8J6WFCgevSbLf/4TBloef
0m5NofvdMRVdzUm13C73Ab8n30DHLqkzqWtykY123rIHFElr1z8qwjw49W2fl/b+
lNYFs6EXIpRmo4Hb+gFprduZ+VNM4iFvh7m14L1MBaFrdmR4mcKGvSNyC2vvzMsh
Lnjx1sQaMNkQOje6C/Ka6KZ85W2bA4/IQAAfOIkiWrlxTJiE3GU2d+qnvyfKIJJh
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323918961836703471882704226314092450287029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-12 15:28:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-10 15:28:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kitesurfpuntacana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22906611289812109197698860145951752323468613946334779153841889424845977527072055796722098405246073756391860684982151917128487610772946182713553913944395571494119527245215145098403712851338850252581770534285589354707207627699469855184366065099863735920361191617056730986155402628969656871616048767688780809978669006259330356908267691621149320942677368195660114324580693455416751156120950708566521844437833306434674667204197780890351701432531618962734591045188818201326205349186457607606066563114314230361539196511315296367055153016783236883278800264163670217549815782449435865502633980860743436732678387096201230180673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36cd07785d00b3e81eb3d5f479d95e30df7497c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (324 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alterniverse.xyz.beautybysophie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragedirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragescan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drmitulpatel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshlocally.com.cryptohostels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldexchangerates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempexpo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingidio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcareerguidance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitesurfpuntacana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nightcurfew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psiloil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarraven.com.flalitigators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unionjackvapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaid.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188b06ff44000000403004630440220484f35aa2fd7b80f2431dbc073629b0059768d288cc6d6eeea32f998cd2e1e0002200c4628349ab52420aa8c6e4f446930fa03753aae1caee6d0fff7b7b8051206fb0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188b06ff638000004030046304402202255a91a39eb78489b1975136972b1a83573842d18112af1864af6cdeeb3cdc4022017619f7b050c1f8a2d789fb43a41c8092e9187b99c3c1e6cd65db971a1d2d771
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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