nonfungiblecertificate.org
Issued by R3
About this certificate
This digital certificate with serial number 03:06:ea:b4:e8:19:ad:17:54:7e:db:72:35:32:90:ec:35:15 was issued on by Let's Encrypt.
With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=nonfungiblecertificate.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:06:ea:b4:e8:19:ad:17:54:7e:db:72:35:32:90:ec:35:15Serial Number (int): 263690530668807878524940550196665307116821
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 62:28:29:1b:3c:b5:9d:58:75:b7:26:c2:13:d6:6d:d0:76:31:a2:e3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 6d:f1:20:18:2e:9a:a6:4f:aa:34:d5:f6:36:e7:9f:c9:2e:24:7a:1a
Fingerprint (sha256): 6a:c9:5b:42:53:bc:73:7f:30:c8:76:86:65:57:d5:80:5f:17:26:ae:a5:23:db:31:c6:69:9d:a7:1e:1b:2d:ab
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate nonfungiblecertificate.org
16
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nonfungiblecertificate.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
arafagroup.com
blackandwide.com
homesforsaleolympia.com
kitten.cool
lisabloom.com
nftregency.com
nonfungiblecertificate.org
opebsea.com
questassist.com
religious-storehouse.com
rfid-labels.com
rubberstamped.com
sanantoniohomejournal.com
schoolhousemarketing.com
studiolegal.com
trailerskirting.com
blackandwide.com
homesforsaleolympia.com
kitten.cool
lisabloom.com
nftregency.com
nonfungiblecertificate.org
opebsea.com
questassist.com
religious-storehouse.com
rfid-labels.com
rubberstamped.com
sanantoniohomejournal.com
schoolhousemarketing.com
studiolegal.com
trailerskirting.com
Other certificates including the domain name nonfungiblecertificate.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for nonfungiblecertificate.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgISAwbqtOgZrRdUfttyNTKQ7DUVMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMDYwODE2NDRaFw0yNDA1MDYwODE2NDNaMCUxIzAhBgNVBAMT Gm5vbmZ1bmdpYmxlY2VydGlmaWNhdGUub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA6+JujwECigq/a72RDQWbaWm8QwUIGemURPogToIYhDOO5r3h qLtXUoQZv/WsXKUdr33AXzQfpOkO+pThxo+7aIA0dT7VDTikcquDUbcQf085T6pv 2Q/zTj+ESWPzF+93d+9kdBzTi4jCRVvgZT3fiWOIgD6avbaCowYPkcqk4ET6jS20 +JzpB7tBxY4niceEKf5W0MFF6nhjqz9bw9JGKpxZuyojsEeStdm3vxBBVaq7lBvb Gl88+k8TpivHThKgojjgpC5ZzuZ+5oIyHLmqqjojFa1g1YUeXAADu1KvjMZqDeds W2nRFo0hHH4JI/HNwAMYN+XxrrrhS0OJo3HSeQIDAQABo4IDQDCCAzwwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBRiKCkbPLWdWHW3JsIT1m3QdjGi4zAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzCCAUcGA1UdEQSCAT4wggE6gg5hcmFmYWdyb3VwLmNvbYIQ YmxhY2thbmR3aWRlLmNvbYIXaG9tZXNmb3JzYWxlb2x5bXBpYS5jb22CC2tpdHRl bi5jb29sgg1saXNhYmxvb20uY29tgg5uZnRyZWdlbmN5LmNvbYIabm9uZnVuZ2li bGVjZXJ0aWZpY2F0ZS5vcmeCC29wZWJzZWEuY29tgg9xdWVzdGFzc2lzdC5jb22C GHJlbGlnaW91cy1zdG9yZWhvdXNlLmNvbYIPcmZpZC1sYWJlbHMuY29tghFydWJi ZXJzdGFtcGVkLmNvbYIZc2FuYW50b25pb2hvbWVqb3VybmFsLmNvbYIYc2Nob29s aG91c2VtYXJrZXRpbmcuY29tgg9zdHVkaW9sZWdhbC5jb22CE3RyYWlsZXJza2ly dGluZy5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1 BIHyAPAAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY19tJm6 AAAEAwBHMEUCIHt8wOPWeIUTJKvDgkGR3L2ePpSqslr9b9fh94Q69TKBAiEAnsUg 232bLreXv5N1wG82avHmh6O8FXZcCJLqGcxP0yUAdgCi4r/WHt4vLweg1k5tN6fc ZUOwxrUuotq3iviabfUX2AAAAY19tJnnAAAEAwBHMEUCIGxmcstBQYK08ClAvWBY o7UZ9Gl6uJsxZtst2uDq6aQsAiEAodwjrg3zjGYyOEiMhqetIDlMe/Yn0CD2tKNi bGNIp+cwDQYJKoZIhvcNAQELBQADggEBAJzsTGpGD3N6KNz9EUn90HH16PAhAPp1 XPXpx3Va+wrJL3POffcbDKWgh6ygZVkldzBzSlTczWizk2Vf6/v4hw+w4P2Kupmj MgnYmn7ROAPNrImbAYslRv13lrcWyECvs6qYNj4t0ZdX2hpV+swsoVsMXXWS7RgL YK5wwbM0yJxZHinFDaDfwD6VNMu9tyQVYSDcIuRFvOjvnapYVOnaK7aZgZf+QFKy grUW1wegxnrzhqPQUwIy+hCZQTEnLn1ly8ZEs36G/AHbtmkkbglxgfBzmL54C4yM b+shFRb3qIMx03tpMHB0Xu9m1Jxl8yyq69FMw7seCEds/HnVN2C+7qM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+JujwECigq/a72RDQWb aWm8QwUIGemURPogToIYhDOO5r3hqLtXUoQZv/WsXKUdr33AXzQfpOkO+pThxo+7 aIA0dT7VDTikcquDUbcQf085T6pv2Q/zTj+ESWPzF+93d+9kdBzTi4jCRVvgZT3f iWOIgD6avbaCowYPkcqk4ET6jS20+JzpB7tBxY4niceEKf5W0MFF6nhjqz9bw9JG KpxZuyojsEeStdm3vxBBVaq7lBvbGl88+k8TpivHThKgojjgpC5ZzuZ+5oIyHLmq qjojFa1g1YUeXAADu1KvjMZqDedsW2nRFo0hHH4JI/HNwAMYN+XxrrrhS0OJo3HS eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 263690530668807878524940550196665307116821 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 08:16:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 08:16:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nonfungiblecertificate.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29777659383447361263115865494908918573650370273321713174578794458835669120820838466360685218205997930784783118529411370283349383837016819686426828630042256494671735531830818445077055310496124821637339391390011469285416739017264767556382880467284819670436175274401440866200689013816712611891311279055384051235243089808227171047587664078103397149330256186979883749193634911831839117413575904081358897542644498148249714313715033233722166504569526065936470291618227162353443747077282950096144841872085223607628413190802880948137134530189776059502210120980465543097748325272171188597897582771733966916136228298452227969657 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6228291b3cb59d5875b726c213d66dd07631a2e3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (318 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arafagroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackandwide.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesforsaleolympia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitten.cool' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisabloom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nftregency.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonfungiblecertificate.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opebsea.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questassist.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religious-storehouse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfid-labels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubberstamped.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniohomejournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolhousemarketing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiolegal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trailerskirting.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d7db499ba000004030047304502207b7cc0e3d678851324abc3824191dcbd9e3e94aab25afd6fd7e1f7843af532810221009ec520db7d9b2eb797bf9375c06f366af1e687a3bc15765c0892ea19cc4fd325007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d7db499e7000004030047304502206c6672cb414182b4f02940bd6058a3b519f4697ab89b3166db2ddae0eae9a42c022100a1dc23ae0df38c663238488c86a7ad20394c7bf627d020f6b4a3626c6348a7e7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009cec4c6a460f737a28dcfd1149fdd071f5e8f02100fa755cf5e9c7755afb0ac92f73ce7df71b0ca5a087aca06559257730734a54dccd68b393655febfbf8870fb0e0fd8aba99a33209d89a7ed13803cdac899b018b2546fd7796b716c840afb3aa98363e2dd19757da1a55facc2ca15b0c5d7592ed180b60ae70c1b334c89c591e29c50da0dfc03e9534cbbdb724156120dc22e445bce8ef9daa5854e9da2bb6998197fe4052b282b516d707a0c67af386a3d0530232fa10994131272e7d65cbc644b37e86fc01dbb669246e097181f07398be780b8c8c6feb211516f7a88331d37b693070745eef66d49c65f32caaebd14cc3bb1e08476cfc79d53760beeea3