www.netzerostandard.com
Issued by R3
About this certificate
This digital certificate with serial number 04:03:0d:4a:8f:28:7d:25:22:5e:c9:d8:10:18:5a:e2:16:9c was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.netzerostandard.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:03:0d:4a:8f:28:7d:25:22:5e:c9:d8:10:18:5a:e2:16:9cSerial Number (int): 349487657925308967802029419337196731766428
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: cc:ca:5c:cf:5e:0b:f2:d3:0f:35:1b:23:63:3c:80:0e:0e:e7:3b:41
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): f2:2c:c7:3c:8a:c1:5a:7e:ff:78:8c:39:e9:d9:71:c7:29:37:c0:2b
Fingerprint (sha256): 61:b1:f8:52:39:93:7b:4b:f2:75:cd:f5:64:60:ae:d0:c8:02:bc:b9:19:9f:3f:0b:01:04:cb:7f:67:64:8a:f5
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.netzerostandard.com
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.netzerostandard.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
consolidationaccounting.com
paintedsoultattoos.com
pestpipe.com
poconorealtor.com.searchenginehq.com
questioncompiler.com
quiz.simplifiedfor.com.howtolosebellyfatin10days.com
satexashomes.com
tvgraffiti.art.galacticleyline.net
www.drdukeshow.com
www.netzerostandard.com
xcluded.news.cubemodularhomes.net
paintedsoultattoos.com
pestpipe.com
poconorealtor.com.searchenginehq.com
questioncompiler.com
quiz.simplifiedfor.com.howtolosebellyfatin10days.com
satexashomes.com
tvgraffiti.art.galacticleyline.net
www.drdukeshow.com
www.netzerostandard.com
xcluded.news.cubemodularhomes.net
Other certificates including the domain name netzerostandard.com
(limited to 100 certificates)
netzerostandard.com
kvpentertainers.ca
arbitragers.ca
occasion.org
netzerostandard.com
sellout.hacker.rehab
sex-videos.co.za
voteref.org
www.netzerostandard.com
entertainmentiplaw.co.safebathrooms.org
louisianadwi.org
rusvoboda.com
ateliernovako.ca
invincible.me
mobi.bike
ladyboy.ca
homeschoolnfts.org
trailerupholstery.ca
impossible.ca
lerkus.org
kvpentertainers.ca
arbitragers.ca
occasion.org
netzerostandard.com
sellout.hacker.rehab
sex-videos.co.za
voteref.org
www.netzerostandard.com
entertainmentiplaw.co.safebathrooms.org
louisianadwi.org
rusvoboda.com
ateliernovako.ca
invincible.me
mobi.bike
ladyboy.ca
homeschoolnfts.org
trailerupholstery.ca
impossible.ca
lerkus.org
Certificate
The complete raw certificate details for www.netzerostandard.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGIzCCBQugAwIBAgISBAMNSo8ofSUiXsnYEBha4hacMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMjUyMzA4MDdaFw0yNDAyMjMyMzA4MDZaMCIxIDAeBgNVBAMT F3d3dy5uZXR6ZXJvc3RhbmRhcmQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAzahXT8ZrSJOwFwkMT4iwNqfCyRNL1Q+zutZHdYVd9KnsPKAlzpAl 56FCiM0NwRDWz4vz5Z9Jv5N32/UGEgjTrqzac/4a88wyJrepOMnWxALMpNGarwUq 3UR8tQwcVSA155mmxxt0T9XpehQUkpRymH7vIcMN9bny7DA3hOBDhswH9NG5puIl MKk1XV5fzf7o9DY0Xcwa/FiTeROXfxdzFA8lAWQw57/dcKbCP6C+YuiewhPMrBlo O4D6sKsmrbmZOpIjdXWSsRluuOGQZhDxRMzuoLCS9nx40V31rp2trhjDAOjboGlT JikwBkbiAcCnMrK0nLhLP2gSTc8SS1EhPwIDAQABo4IDQTCCAz0wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E AjAAMB0GA1UdDgQWBBTMylzPXgvy0w81GyNjPIAODuc7QTAfBgNVHSMEGDAWgBQU LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku bGVuY3Iub3JnLzCCAUgGA1UdEQSCAT8wggE7ghtjb25zb2xpZGF0aW9uYWNjb3Vu dGluZy5jb22CFnBhaW50ZWRzb3VsdGF0dG9vcy5jb22CDHBlc3RwaXBlLmNvbYIk cG9jb25vcmVhbHRvci5jb20uc2VhcmNoZW5naW5laHEuY29tghRxdWVzdGlvbmNv bXBpbGVyLmNvbYI0cXVpei5zaW1wbGlmaWVkZm9yLmNvbS5ob3d0b2xvc2ViZWxs eWZhdGluMTBkYXlzLmNvbYIQc2F0ZXhhc2hvbWVzLmNvbYIidHZncmFmZml0aS5h cnQuZ2FsYWN0aWNsZXlsaW5lLm5ldIISd3d3LmRyZHVrZXNob3cuY29tghd3d3cu bmV0emVyb3N0YW5kYXJkLmNvbYIheGNsdWRlZC5uZXdzLmN1YmVtb2R1bGFyaG9t ZXMubmV0MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGMCPR0+wAA BAMARzBFAiEAzkVI69KstemKwfP1OWNrOq6DgPTXIoLYEtlCBBDr4cYCIGvcNohc OO1ZOenJbrap00gj5TaTkiB+A7DBXE8UQjvrAHYA7s3QZNXbGs7FXLedtM0TojKH Rny87N7DUUhZRnEftZsAAAGMCPR1BwAABAMARzBFAiBFn9xe3+WXHDMS/+nmPYn9 THQGnGErAnPTOywR/AM3vAIhANgA8HtxkeaL1XvwjtLbUwc43J3kAlv3CwxjyPMo HvkfMA0GCSqGSIb3DQEBCwUAA4IBAQCOS+T/ZniPrvk6aXyRdV3jJplVz/c0OwaX +ve/cJQNX3gp4k6eji7L+g04DXguaUiUVs7jgtDxIVHIh9pV1k794oPbbBcHnS1Y DdY9hsJJbJERBb6KOnTiRcf3OKqKTMxGTXT9tdISnnxqsil3Pm/Opm9sf1QzD5+/ gjtbD9HuyvbmDjR71+/V/DEzFy7/vdJcrDdIbULwfy7oWuoKw+QwD9twsPAyooMG 9v4KvqGBhYV20bk+XI+sT0RyhKbYyJHuaEa4n/+inbcNbFPWvkxeIAVlokeAdwgS /Y7B4hIYaYXC0D4TX4flnJcUngo+vWikCX8/p679yf1mfkOOoEik -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzahXT8ZrSJOwFwkMT4iw NqfCyRNL1Q+zutZHdYVd9KnsPKAlzpAl56FCiM0NwRDWz4vz5Z9Jv5N32/UGEgjT rqzac/4a88wyJrepOMnWxALMpNGarwUq3UR8tQwcVSA155mmxxt0T9XpehQUkpRy mH7vIcMN9bny7DA3hOBDhswH9NG5puIlMKk1XV5fzf7o9DY0Xcwa/FiTeROXfxdz FA8lAWQw57/dcKbCP6C+YuiewhPMrBloO4D6sKsmrbmZOpIjdXWSsRluuOGQZhDx RMzuoLCS9nx40V31rp2trhjDAOjboGlTJikwBkbiAcCnMrK0nLhLP2gSTc8SS1Eh PwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 349487657925308967802029419337196731766428 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-25 23:08:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 23:08:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.netzerostandard.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25961864589133748955067515507658810345030761311591708957705822479465534842404521360403962218724773131664574976494871398597901936821334901350959979509781693317022986027561191194458653599441579569736237129520664324564992894017127501777488184879636342348761629369442665695869742486034481155758515768022654757719547038789914800004308564220040946138487480230108525158293820243615583365255488000939126975678897600072357518798519159424833769307034232680485357584181048962092035798283655547960004219426087111430448095048569924598973567103485855121103976261687551874499217197407187286157851241192751987114785603018830946312511 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ccca5ccf5e0bf2d30f351b23633c800e0ee73b41 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (319 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consolidationaccounting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paintedsoultattoos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pestpipe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poconorealtor.com.searchenginehq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questioncompiler.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quiz.simplifiedfor.com.howtolosebellyfatin10days.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satexashomes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvgraffiti.art.galacticleyline.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drdukeshow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netzerostandard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xcluded.news.cubemodularhomes.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c08f474fb0000040300473045022100ce4548ebd2acb5e98ac1f3f539636b3aae8380f4d72282d812d9420410ebe1c602206bdc36885c38ed5939e9c96eb6a9d34823e5369392207e03b0c15c4f14423beb007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c08f4750700000403004730450220459fdc5edfe5971c3312ffe9e63d89fd4c74069c612b0273d33b2c11fc0337bc022100d800f07b7191e68bd57bf08ed2db530738dc9de4025bf70b0c63c8f3281ef91f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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