www.lionturf.cashdaniels.com

Issued by R3

About this certificate

This digital certificate with serial number 03:4d:a7:66:c7:90:13:31:1c:25:18:cf:1e:77:a9:2f:47:80 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.lionturf.cashdaniels.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:a7:66:c7:90:13:31:1c:25:18:cf:1e:77:a9:2f:47:80
Serial Number (int): 287761114785382959243943413553798900041600
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:81:b1:1f:36:26:ff:fb:d7:21:ea:8f:ed:bf:05:dd:3d:39:82:49
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b5:ec:d2:6a:a4:0d:8b:15:05:b5:dd:e0:9c:2f:fd:2d:33:00:46:e3
Fingerprint (sha256): 6c:ac:b3:d6:51:90:60:0e:ad:a6:f9:37:70:6f:f5:36:91:9f:78:21:b0:06:a7:2a:55:33:19:68:bb:d2:be:7b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.lionturf.cashdaniels.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lionturf.cashdaniels.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cashdaniels.com
*.commsgate.co.zw
*.commsgateway.co.zw
*.commsgateway.com
*.lionturf.co.zw
commsgate.co.zw
commsgateway.co.zw
commsgateway.com
lionturf.co.zw
www.commsgate.cashdaniels.com
www.commsgateway.cashdaniels.com
www.commsgatewayzw.cashdaniels.com
www.lionturf.cashdaniels.com

Other certificates including the domain name cashdaniels.com

(limited to 100 certificates)
commsgateway.com
ambarcareltd.com
ambarcareltd.com
*.dawsdaleengineering.com
beizim.com
devbrandszim.com
commsgateway.com
itlveneka.com
www.yum-yum.cashdaniels.com
ambarcareltd.com
hflelectric.co.za
cashdaniels.com
divinecaregl.com
commsgateway.com
www.wowexpcouriers.cashdaniels.com
ambarcareltd.com
devbrandszim.com
beizim.com
www.agricom.cashdaniels.com
ictaacs.co.zw
hflelectric.co.za
www.itlveneka.cashdaniels.com
commsgateway.com
hflelectric.co.za
criticalskillscertification.com
ambarcareltd.com
www.shamarinvestments.cashdaniels.com
ambarcareltd.com
www.lionturf.cashdaniels.com
commsgateway.com
*.cashdaniels.com
www.commsgate.africa.cashdaniels.com
beizim.com
sparkle.cashdaniels.com
ambarcareltd.com
beizim.com
beizim.com
hflelectric.co.za
www.commsgateway.cashdaniels.com
itlveneka.com
*.beizim.com
commsgateway.com
www.allbro.co.zw.cashdaniels.com
dawsdaleengineering.com
wowexpcouriers.com
ictaacs.com
dawsdaleengineering.com
dawsdaleengineering.com
beizim.com
*.lionturf.co.zw
www.commsgate.africa.cashdaniels.com
devbrandszim.com
www.dawsdaleengineering.cashdaniels.com
itlveneka.com
ambarcareltd.com
ambarcareltd.com
cashdaniels.com
divinecaregl.com
commsgateway.com

Certificate

The complete raw certificate details for www.lionturf.cashdaniels.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mePacbnZrU5yA79dKAh
AhE5k8qPajT0UIGLNYFIvKYwVcOLTbvbIumbEi70ve6A1ziTA4f9qYmKaSoguQYI
MMP6lGaoHxXia2UvfqK8BnPhFmwFaS4PF7c3nVTB8hW40ncPV8DY3lV+ZrvAHxl+
zYjmrHy/hCba93irLpIRlG4I62kW7+INUD3EDbQ/R4EBS9xKceW169z40Vft9fP6
X3rNMqDRza1c+ewEmVDJOCSdOtU7mh93qZZ1KzB1TPU8Xen3hiANE7pQY+Dm2DLt
jmlsiElPSj+lzOG2sP9ItHtUdj/eTs2bvGDccI5EB2eYBkWFbxjOfhcHwdfG3+lQ
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287761114785382959243943413553798900041600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 21:34:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 21:34:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lionturf.cashdaniels.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30095784023687124679726803715237603758170997851021966396082726787535236793120109246325822622134782078934472142723920559960562870743220780188584187276779201425323609462768999111159352473192315739516491972124845283922807808153285718274068319114754869479941073654837562899855151242515973478170289227106936850333292917758912801224952555157760065233294830337925243573157224621339209206193085576174431058432037882783510991270403888217032021330178347876143730600419348451215522359490696275162302981227291929079418832611867241066262457687894853893180494032993594888110294369877689455411342066287909348196245585918737747890281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e81b11f3626fffbd721ea8fedbf05dd3d398249
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (304 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cashdaniels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commsgate.co.zw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commsgateway.co.zw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commsgateway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lionturf.co.zw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commsgate.co.zw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commsgateway.co.zw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commsgateway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionturf.co.zw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commsgate.cashdaniels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commsgateway.cashdaniels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commsgatewayzw.cashdaniels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lionturf.cashdaniels.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d85b5ba250000040300483046022100c39bf2783e17c637d83c3fdc60adb7fa9cb00c2484658df866fa6b7c572bccd9022100918b7ea6dd65431840a72b5411f8cf6cb0bba1d8cf5c8d86172ca82677242e5300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d85b5ba790000040300473045022005d2d9778f6dc07b0f570029dc9509be62e0dc5112155800060e855db1380a38022100a5e1e1eaa6213028cf337f2cf22d6e8b36b7adebb8d4b6bf6be3017582109a9d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007ddc337aca2133ddf3decd3e24efab6d47c7565ffab355ea5138d7be2cdfbe6f6a6441df70324b9e615333b27cf9bc506ccc306e472bda71cd9f9ed6e2846b425b2d1470fedcdcc4c3837cd3ab9c8975705d326cc39a04b389431a7eab3395e0f8662ec2a7644ab149e29811e717460db51b947b44c0ff28f275c5ad2d5f70d0b14fd65607870e95a4744dfe041196e0f7459ccd27415f2f23dbfb465fd42c6a0b43d539cb40b74836e9d63f8389fc0e378413bafaf5f210842b96107a7975e152651547168cbfe056b64a8e040d320b6397b05ac5c0159e0fc9c2120d8b9dcb5c0cdf573f5a58acfa036554725e986253f5cc5c88f0cd592668a0b9ab7b44a4