profoundstrategy.me

Issued by R3

About this certificate

This digital certificate with serial number 03:5e:3d:35:0b:8a:eb:b6:92:7b:09:60:ca:8e:14:c2:f3:f5 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=profoundstrategy.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5e:3d:35:0b:8a:eb:b6:92:7b:09:60:ca:8e:14:c2:f3:f5
Serial Number (int): 293404758619438279480219526940845861434357
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:96:02:8c:98:ab:16:d3:86:fc:bb:36:2f:a2:b1:72:e1:8e:97:ac
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e1:c0:36:d8:69:b2:30:45:d2:7d:49:bb:66:1a:a9:55:80:e1:00:35
Fingerprint (sha256): 60:c1:77:c3:e6:8d:60:a2:cf:f6:32:df:7e:19:c9:a9:1c:32:94:52:0f:c8:4a:d5:92:9c:90:c1:e8:f7:3d:e9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate profoundstrategy.me

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for profoundstrategy.me

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

betterbator.com.aurangabaddental.in.delawarechamber.com
globalfoodgroup.com
healthyhomeaudit.net.specturr.com
hemptracks.com.explorebooks.com
hoodriveryachtclub.com
outdoorsmandeals.com
profoundstrategy.me
yumotokan.com

Other certificates including the domain name profoundstrategy.me

(limited to 100 certificates)
profoundstrategy.me
letchat.world
profoundstrategy.me
profoundstrategy.me
venters.co.za
norwoodfoundry.ca
theovercomers.ca
bramptonhomebuyers.ca
blood.vc
www.epik.africa
profoundstrategy.me
profoundstrategy.me
thedailyhealthnews.com
www.epik.africa
profoundstrategy.me
bramptonhomebuyers.ca
okeydokeykaraoke.ca
profoundstrategy.me
profoundstrategy.me
profoundstrategy.me
moviemarketingllc.com

Certificate

The complete raw certificate details for profoundstrategy.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDzKpnJ4K8vyrNjNGp1i
b5AaTCKNyH2AckJ0MfgkWTF3pfaHYm/m1IAZeogaIK+eabfd33lCYW8Aw25HIg76
43GpESZyY3ldgJzPHGHu/Vste2Hmfqi1Pupo1EucZjmsVo9PGVs0Tz5Y5crN7JUY
/7Qw8+oJA6E/RuBS8DSiYKkC/tPOblobhyitufLJFYT6t8ZZGD8XdX87s+CZz75w
0CVIJYiuLfb7SA2MUEQ/h6GLCamLz5GAKHFM/0uZUR490GO66KJn/3/zDFH40YAp
zocX89L1qQH8RBzfSQ7EXGqPFFaj7F1Cu4UpTwz4ftfJIzvji9xsW8Sko1zqGnxC
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293404758619438279480219526940845861434357
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 22:41:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 22:41:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'profoundstrategy.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23762778789979321779204381894569872274276018873109173746799186647188881796240739966657229632052100074278387176198783322735443605492513573184639496633801035343778440258587325790986900454007340952065533105923187794473031608480065599926244396955070890211360608024079297774081704767656393174385484495068246468986042997025601973016177153901362682749571135875924030788369498291546430515395884340357589305298929107016757591144684341299082257089550625354993680956589807403329782290088257315038372327844305282225452588468924336448440043593062807209199898739823439196919243157551922301543354333936775302850708647131036281225831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9096028c98ab16d386fcbb362fa2b172e18e97ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (231 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterbator.com.aurangabaddental.in.delawarechamber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalfoodgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomeaudit.net.specturr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemptracks.com.explorebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoodriveryachtclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoorsmandeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profoundstrategy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumotokan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c229c40bd00000403004630440220539500f3adcd96053b4874b02f1f93e90470571c294647ba88a60906b31da59202206c1a00e429e326d5052efe5f912f6e86fba98be11f8b870b3435b888d9a9cfdd00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c229c410900000403004630440220363315945482a00b03974d3336758e192f92e2fe8dbf0da8258927c1d19f007c02201cd68695ca7245f203510a558f9aca3ae3b48b20916c78b4fc0f3578757ed6e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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