arbitrage.gd
Issued by R3
About this certificate
This digital certificate with serial number 04:4c:b6:e0:a9:d6:f4:f2:5a:9a:f5:e1:48:59:a5:64:ef:43 was issued on by Let's Encrypt.
With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=arbitrage.gd
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:4c:b6:e0:a9:d6:f4:f2:5a:9a:f5:e1:48:59:a5:64:ef:43Serial Number (int): 374553689627519333425470476287805055364931
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2d:25:59:ce:b7:e5:85:ec:89:6e:ed:bc:4e:c9:33:cc:56:b1:2b:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): f5:46:1b:4e:45:70:3d:dc:d9:76:2b:92:87:95:c0:cb:04:90:ae:60
Fingerprint (sha256): 60:fb:13:8d:b7:d6:e5:7d:fb:4f:cd:66:92:16:2b:d4:85:74:f5:c8:7d:79:7e:ea:af:a5:69:0b:d9:19:69:e2
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate arbitrage.gd
16
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for arbitrage.gd
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
actuantindia.com.physicalgoldcoins.com
alternativepac.org
arbitrage.gd
bellevue-living.com
dadsfor.com.iprsecrets.com
horse4vip.com
legalfactcheck.com
madewithrxsugarallulose.com.phonesof.com
parkeraviation.com.au.colormust.com
republicanphoto.com
resurrectionsugar.com
rishelle.com
rxsugartheworldwideleader.com
sacramentochillers.com
turntableneedles.us
webandsearch.com
alternativepac.org
arbitrage.gd
bellevue-living.com
dadsfor.com.iprsecrets.com
horse4vip.com
legalfactcheck.com
madewithrxsugarallulose.com.phonesof.com
parkeraviation.com.au.colormust.com
republicanphoto.com
resurrectionsugar.com
rishelle.com
rxsugartheworldwideleader.com
sacramentochillers.com
turntableneedles.us
webandsearch.com
Other certificates including the domain name arbitrage.gd
(limited to 100 certificates)
Certificate
The complete raw certificate details for arbitrage.gd in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgISBEy24KnW9PJamvXhSFmlZO9DMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MTYxODE0MDlaFw0yMzEyMTUxODE0MDhaMBcxFTATBgNVBAMT DGFyYml0cmFnZS5nZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKsE v63y6LPA9J4PYN4Pl+DG5I3gvj9dEfjUmIdbH3SDZWpFK2aOdjFcMqYtf52Qf2dP NltHblbwesqbZu/da2Tz+X+K5bkqStK7H1IZ+Zp1kK+JrMXGRwO/8r+JEaAxu45+ 8uF5cWHH421zxEGPnRanBpOtSVO7L8xR58KAnqiHf6zx5OxrIpj+TcfPiJF2iI1v j4fuwTIWJsR8XqD6ZwClzIpwkpxBK3lrdyT8bjhPBrxuWhnggBEw7AbH5iIKpoxC cZuminaXedN00WXS2T7CzuYXKXAPjcDxtL2q/+O/czMoGyuIZbDibBc/8MUhJa9z 6pMW9hM2NwLm+bt8Dd0CAwEAAaOCA4owggOGMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQULSVZzrflheyJbu28TskzzFaxK0cwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w ggGSBgNVHREEggGJMIIBhYImYWN0dWFudGluZGlhLmNvbS5waHlzaWNhbGdvbGRj b2lucy5jb22CEmFsdGVybmF0aXZlcGFjLm9yZ4IMYXJiaXRyYWdlLmdkghNiZWxs ZXZ1ZS1saXZpbmcuY29tghpkYWRzZm9yLmNvbS5pcHJzZWNyZXRzLmNvbYINaG9y c2U0dmlwLmNvbYISbGVnYWxmYWN0Y2hlY2suY29tgihtYWRld2l0aHJ4c3VnYXJh bGx1bG9zZS5jb20ucGhvbmVzb2YuY29tgiNwYXJrZXJhdmlhdGlvbi5jb20uYXUu Y29sb3JtdXN0LmNvbYITcmVwdWJsaWNhbnBob3RvLmNvbYIVcmVzdXJyZWN0aW9u c3VnYXIuY29tggxyaXNoZWxsZS5jb22CHXJ4c3VnYXJ0aGV3b3JsZHdpZGVsZWFk ZXIuY29tghZzYWNyYW1lbnRvY2hpbGxlcnMuY29tghN0dXJudGFibGVuZWVkbGVz LnVzghB3ZWJhbmRzZWFyY2guY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYK KwYBBAHWeQIEAgSB9ASB8QDvAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0J gSXttJkAAAGKn2op5gAABAMARzBFAiAznYPU5OD6MYOj3fUqFYxi751OaiO78VbT oLMB7LkRfQIhAPLmOIELCD8/59iMzd5UcoGE4JJY4OiBJ5voGJJrWocoAHUArfe+ +nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGKn2oqUQAABAMARjBEAiBk kM3wwhgaxYl6UjAwS16WEzMS5APJuf0dRIAoVj3VRgIgB/XS2DrUWpPlRkjzv1uD qaAq8LgzZyirixxsZy3/tmgwDQYJKoZIhvcNAQELBQADggEBAJBiiXoV6lAUWHbY +Wz52GF+TDVsVhYbRKlqeoAIGymaIIRxzNoSJmaU6WVbczqW3wbF2hcP5IINMKcL EqG75O067Lz1Ermu8FFDxsnzmsiUtyxCq0BZYeJ+wyM0+l/u+AuOZBj6dAF7GnTi cS5SQxHzJorVvXGmGI2BOic/juBapmYrLVuRRNrNndUBqV4vvQ17SZHPTEodbAPP B14kxpVKLuG0FAXmdNMmM/O151fYeMwIXtINDYYGU19bQ+kX0Y/BDu85gpnCWvG1 1AIQj0tpn5zjSRJ/CpfJnSLpb9K807KA6mbfkR+LpLGS510GD2L+4wm74kjZTj7w ajRzE9c= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwS/rfLos8D0ng9g3g+X 4MbkjeC+P10R+NSYh1sfdINlakUrZo52MVwypi1/nZB/Z082W0duVvB6yptm791r ZPP5f4rluSpK0rsfUhn5mnWQr4msxcZHA7/yv4kRoDG7jn7y4XlxYcfjbXPEQY+d FqcGk61JU7svzFHnwoCeqId/rPHk7GsimP5Nx8+IkXaIjW+Ph+7BMhYmxHxeoPpn AKXMinCSnEEreWt3JPxuOE8GvG5aGeCAETDsBsfmIgqmjEJxm6aKdpd503TRZdLZ PsLO5hcpcA+NwPG0var/479zMygbK4hlsOJsFz/wxSElr3Pqkxb2EzY3Aub5u3wN 3QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 374553689627519333425470476287805055364931 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 18:14:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 18:14:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arbitrage.gd' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21589091844110501919130652523659757883827176325761889254945982062065396361986310848341050356365338680155834168994223442778112142809098821194368376094740975947084290606256695320060354437876063832543312128737335911856978605102788121578854345457162934680632715768635540848816468519690887341612634647123014399293351099425155394627340413391124712516976554790086946607047660366618799620062184706853473596063129407382109098974554077693329920455892900758464315691191271101092029485175930530242870949693656806383447719340156680811664573045572870355355064579648310119440916661746525310012695786543627203283918401045104170896861 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2d2559ceb7e585ec896eedbc4ec933cc56b12b47 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (393 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actuantindia.com.physicalgoldcoins.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alternativepac.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrage.gd' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellevue-living.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dadsfor.com.iprsecrets.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horse4vip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalfactcheck.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madewithrxsugarallulose.com.phonesof.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkeraviation.com.au.colormust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicanphoto.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resurrectionsugar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rishelle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugartheworldwideleader.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacramentochillers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turntableneedles.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webandsearch.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a9f6a29e600000403004730450220339d83d4e4e0fa3183a3ddf52a158c62ef9d4e6a23bbf156d3a0b301ecb9117d022100f2e638810b083f3fe7d88ccdde54728184e09258e0e881279be818926b5a8728007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a9f6a2a51000004030046304402206490cdf0c2181ac5897a5230304b5e96133312e403c9b9fd1d448028563dd546022007f5d2d83ad45a93e54648f3bf5b83a9a02af0b8336728ab8b1c6c672dffb668 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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