immersa.com
Issued by R3
About this certificate
This digital certificate with serial number 03:47:36:2d:97:83:c4:66:85:a0:b1:4d:e1:3c:0b:c2:7f:96 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=immersa.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:47:36:2d:97:83:c4:66:85:a0:b1:4d:e1:3c:0b:c2:7f:96Serial Number (int): 285568920884881912814319829044100834951062
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c7:d2:1e:33:24:62:3f:c9:14:c5:b5:81:32:85:b5:f9:10:98:f9:8a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 0e:5c:e1:47:b2:a1:5e:04:fd:d5:00:14:7c:97:87:ec:23:7d:87:0a
Fingerprint (sha256): 67:97:5b:f0:e8:c2:f7:8e:3c:1d:05:42:c2:c9:29:30:b1:9d:fa:be:01:e5:cf:ba:c8:ae:92:d4:49:cb:0f:c3
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate immersa.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for immersa.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
immersa.com
Other certificates including the domain name immersa.com
(limited to 100 certificates)
www.jojomusic.com
mobilemedicallab.com
outstandingcloud.com
sagaexchange.com
www.award-store.com
poisonivyremovalnewyork.net
immersa.com
immersa.com
8bed.com
www.barbkops.com
manipolazionementale.org
complaintsbureau.org
hillcountrytx.org
zennazi.com
439.me
kwikkopyprinting.com
hillcountrytx.org
www.sanjskaporoka.com
dailybeautycare.com
boaters.world
mobilemedicallab.com
outstandingcloud.com
sagaexchange.com
www.award-store.com
poisonivyremovalnewyork.net
immersa.com
immersa.com
8bed.com
www.barbkops.com
manipolazionementale.org
complaintsbureau.org
hillcountrytx.org
zennazi.com
439.me
kwikkopyprinting.com
hillcountrytx.org
www.sanjskaporoka.com
dailybeautycare.com
boaters.world
Certificate
The complete raw certificate details for immersa.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgISA0c2LZeDxGaFoLFN4TwLwn+WMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMzExNjQyMDNaFw0yNDA2MjkxNjQyMDJaMBYxFDASBgNVBAMT C2ltbWVyc2EuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0yoV k5TWIJ4hmd5nQjC4JHdb6hJjXP5DuGk1yTy0sBZAcNT1oREBzjHFx8CZNJI5AhmJ smS2Dg5amJsMdiI5MQdFDmf7x4mxLoZd+ok+Wunt4+b21Hdt0V0xk/YN7NxcJSUF 3cUQI3BIvr8/BXviFB4G9+R9/R1udFwPDSjLi3T9zeW7YLPReHzaMpy7S4TKJf3b v3r0TDHuaWVehHq+8Gj1sRguI6QqCd4igJO+q0UDzKycGwYSIy04KcBQQnTRssXx D1HQY7S3sf9M8f4ymJ8Bf2SQUakSB75Rxgg07vG780RRWbJNFyuaXL0+xMFLBQNa WXt9I6DcHfiasDFiC7KQXXUXw8jigYygQExujpsD1BGT3XMSMCFGa7cfLY3+g6nG xlf7aeWcuZlCNiWpxnlb1SeRTaiLsS9eotGc0hm/mfj9MMXsAR5A8dLR9hj3Fve/ WiLcWUwC5qV0750t95iSvhBMr0uTznw/QZDHMZQDoVWCwOJDoPANQMTYMmCZECcB SY5ivAs8h49dO9vZaTHDYaixS0mrsgDDiUANQGeiTF2ddzazwMCvx27SaHBaeaQM jVENebw1la74RU36OyjKtlHoIFEO677fdEbBv+HNV3sxpE1+jQGZEU4d39hv2RTA K34kTBhsXH7RXILMlYAtw0+QTE7fdWEuI0p5+k8CAwEAAaOCAgswggIHMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUx9IeMyRiP8kUxbWBMoW1+RCY+YowHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wFgYDVR0RBA8wDYILaW1tZXJzYS5jb20wEwYDVR0gBAww CjAIBgZngQwBAgEwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQBIsONr2qZHNA/l agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY6VmqWyAAAEAwBGMEQCICMOR0thKLNC uejVtd+GuCKSlgIvdhffGVErUXqEuCbCAiAS3/mMxlad+/bvThY9fRbl/tEHLPbZ kH+LQDQnsQ9/+QB1AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAAB jpWapcoAAAQDAEYwRAIgRWdQiggedS9HaugKTOI1ew2ospUq6KCy43H9fbW4EHsC IA3709uKH3DjPakqUk98JsHQINQwYDNvWrIMN7Y/2g+CMA0GCSqGSIb3DQEBCwUA A4IBAQBNfV2Q6LAqMEiAGq8j+SYA4Ubj+B/kDNWihmfhhgOxxI6uYZjnZ1B+TmhN dMoPhq1sTkbLBHNIvgrjQx4Qi+SRROTNb4exbM4DOLn2LSbKsoYXOME7ObG9Bsgu u+KWAPua7kVdAwHsI9kVNOJ8QkYDIglCIC4wFy9CGt1WqvLafN29JSYfLrBKaMho xIxhAx29UsDMICusX2oYGTT/U2s6jGFJhaR+SPb2/UWy3cC7jMQGaaasv514nkyk RUX01CGIsL0CPvsRegW83vqglLWORqDTkcK/VzfTu6hrd5GLJBS6IkkMnBCoddjY 0yrAVDp82tIpPfkqcy9cSqByMpkp -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0yoVk5TWIJ4hmd5nQjC4 JHdb6hJjXP5DuGk1yTy0sBZAcNT1oREBzjHFx8CZNJI5AhmJsmS2Dg5amJsMdiI5 MQdFDmf7x4mxLoZd+ok+Wunt4+b21Hdt0V0xk/YN7NxcJSUF3cUQI3BIvr8/BXvi FB4G9+R9/R1udFwPDSjLi3T9zeW7YLPReHzaMpy7S4TKJf3bv3r0TDHuaWVehHq+ 8Gj1sRguI6QqCd4igJO+q0UDzKycGwYSIy04KcBQQnTRssXxD1HQY7S3sf9M8f4y mJ8Bf2SQUakSB75Rxgg07vG780RRWbJNFyuaXL0+xMFLBQNaWXt9I6DcHfiasDFi C7KQXXUXw8jigYygQExujpsD1BGT3XMSMCFGa7cfLY3+g6nGxlf7aeWcuZlCNiWp xnlb1SeRTaiLsS9eotGc0hm/mfj9MMXsAR5A8dLR9hj3Fve/WiLcWUwC5qV0750t 95iSvhBMr0uTznw/QZDHMZQDoVWCwOJDoPANQMTYMmCZECcBSY5ivAs8h49dO9vZ aTHDYaixS0mrsgDDiUANQGeiTF2ddzazwMCvx27SaHBaeaQMjVENebw1la74RU36 OyjKtlHoIFEO677fdEbBv+HNV3sxpE1+jQGZEU4d39hv2RTAK34kTBhsXH7RXILM lYAtw0+QTE7fdWEuI0p5+k8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 285568920884881912814319829044100834951062 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 16:42:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-29 16:42:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'immersa.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861475558102888117198433183801351537012026213590801480117149052293292668326776284529953241268431061443199803944794054381283100391580927004439555511996649844509313409712118134238661230967322458852894544654246912088501131214442973101872651536905803626832083748360431406397600783603946580144709092711383163483606192276611642048831540120295463440281109516668839564293290648229178308753677362404631413777217828713455216469737162340177155034138349026622496518276416171691690412756751965113921575656112527071084454920271878628321975391733881535613442345995585233836272235446185250188046645288288583400601802304928728073342066611254799919416115207132736046317922319501208273435578394252948960925449328554270299552450632841781735552934618058145582983139048080765748983956361102972020894485940022019786005477921030641482748252225637099610693494382410376100043578399495604230436446464704579111109782771571555338833509591777429053616984750737033293665102023197409008257273159796867428275035338562631023733825302289621665207711006000853683950037977521773411648337884040183286524610953155860322325614339316830005890641401555138045361588510394537113807858064500869229396690933962513069898291311589359214887889586179982121853327804582222088426355279 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c7d21e3324623fc914c5b5813285b5f91098f98a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immersa.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e959aa5b200000403004630440220230e474b6128b342b9e8d5b5df86b8229296022f7617df19512b517a84b826c2022012dff98cc6569dfbf6ef4e163d7d16e5fed1072cf6d9907f8b403427b10f7ff9007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e959aa5ca000004030046304402204567508a081e752f476ae80a4ce2357b0da8b2952ae8a0b2e371fd7db5b8107b02200dfbd3db8a1f70e33da92a524f7c26c1d020d43060336f5ab20c37b63fda0f82 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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