allulose0.com
Issued by R3
About this certificate
This digital certificate with serial number 03:40:00:75:98:1a:75:e7:61:86:f1:3f:57:7d:06:b7:e7:9c was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=allulose0.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:40:00:75:98:1a:75:e7:61:86:f1:3f:57:7d:06:b7:e7:9cSerial Number (int): 283115539861975931625357213274609999669148
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9c:48:60:d4:6e:f5:a1:13:c1:88:bd:aa:36:09:dd:fa:ab:14:9c:20
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): fd:c8:de:bf:0c:47:75:7e:38:56:b5:c0:5a:44:07:e0:ba:02:64:9d
Fingerprint (sha256): 6c:d4:36:83:1f:c5:42:bd:7b:e1:16:86:05:24:1b:8f:38:0d:65:c1:94:c1:89:8a:4f:4b:ef:71:f9:b1:12:3c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate allulose0.com
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for allulose0.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
allulose0.com
carolinacountryhouse.com
cogentechnologies.com
critcompendium.com
designwebpages.com
elkhartgarbage.com
exnary.com
gangadin.com
justgoblue.com
monstermagnets.com
nrifraud.com
pressurewashingcompanieswintergarden.com
sanfranciscopsilocin.com
schwertberg.com
theoriginalzeolite.com
ushalfmarathons.com
zinnia.systems
zinniatoken.io
carolinacountryhouse.com
cogentechnologies.com
critcompendium.com
designwebpages.com
elkhartgarbage.com
exnary.com
gangadin.com
justgoblue.com
monstermagnets.com
nrifraud.com
pressurewashingcompanieswintergarden.com
sanfranciscopsilocin.com
schwertberg.com
theoriginalzeolite.com
ushalfmarathons.com
zinnia.systems
zinniatoken.io
Other certificates including the domain name allulose0.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for allulose0.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISA0AAdZgadedhhvE/V30Gt+ecMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTkwMTQyMTlaFw0yNDA3MTgwMTQyMThaMBgxFjAUBgNVBAMT DWFsbHVsb3NlMC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv 6b8cm2YjLWh8BGbUPfDbqGDF9znsD4a5kUNgGdgDhDhhRUq0EQkC97UtK9roMZBs Qf+yZEvlTaQhXQR7Hb6krFIwtgTu25tMJap6PjYaJNYfoe/3ruq5s0dBVqkxBrDF WIbxCRxQDPx2XvE0dPI5WBDgZeLokzQXgpvF2E4zDHnOqU6IgCyCLcpkzOPQAn0C rpbTHiMKlaceIz3g5p1Q624hbOmH7tqJLZp9+n7OPIcQviGk9MVJW+XmSvgTt1v5 zmrzdfhOuDresYFQMnOEjFnQRbTYzIlKy8wmwNd4AsLqWJhNHGfluxZXBg/mgXRL K71CbVE3ioU9BQ63NTdLAgMBAAGjggNxMIIDbTAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFJxIYNRu9aETwYi9qjYJ3fqrFJwgMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv MIIBdwYDVR0RBIIBbjCCAWqCDWFsbHVsb3NlMC5jb22CGGNhcm9saW5hY291bnRy eWhvdXNlLmNvbYIVY29nZW50ZWNobm9sb2dpZXMuY29tghJjcml0Y29tcGVuZGl1 bS5jb22CEmRlc2lnbndlYnBhZ2VzLmNvbYISZWxraGFydGdhcmJhZ2UuY29tggpl eG5hcnkuY29tggxnYW5nYWRpbi5jb22CDmp1c3Rnb2JsdWUuY29tghJtb25zdGVy bWFnbmV0cy5jb22CDG5yaWZyYXVkLmNvbYIocHJlc3N1cmV3YXNoaW5nY29tcGFu aWVzd2ludGVyZ2FyZGVuLmNvbYIYc2FuZnJhbmNpc2NvcHNpbG9jaW4uY29tgg9z Y2h3ZXJ0YmVyZy5jb22CFnRoZW9yaWdpbmFsemVvbGl0ZS5jb22CE3VzaGFsZm1h cmF0aG9ucy5jb22CDnppbm5pYS5zeXN0ZW1zgg56aW5uaWF0b2tlbi5pbzATBgNV HSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AEiw42va pkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjvQ7vFcAAAQDAEgwRgIhAIU+ ycPwNu6cQ/eN7I+Fkf3z4eXglzB6Jo1HnLLubNyvAiEA1Ed1qae7bx9a4HbJIqNo caikbpt2R409p8F9M6MWAF8AdgDf4VbrqgWvtZwPhnGNqMAyTq5W2W6n9aVqAdHB O75SXAAAAY70O70aAAAEAwBHMEUCIBXM21vYoXwnsipxiBBmzJaRSHN+68PxwMDr T1UP5znKAiEA134Zbxrz/a4AZ8jg1+jahnQcL3PsUGSTtraTgjA7eMMwDQYJKoZI hvcNAQELBQADggEBABw2NuyigoaZlJ3XQ4uQXu3a3k+e0K1p0StSs+hKte2HZZwb IkTVzm8kzp3BOySNv5cYZ8lNCLPUsoWaN6WO/8ZEWsteyLs3ZGhn1SOo9fITJ3gu UL4NQvYwxkLAKmrKS/YPNWrhFnUisSqQJZ1NssN/MQmQAC5tMfNt3YiCsteuzA80 hph43ypv3IhiQ4s6zvZLmwDOCtIg3udh0tN6imOraaEqXx5cRMae3UZsCS0LdL6D O3C4yIgwOExhrkhemXRYSg0FRnfriiHoGAr8KIiLiPJ9VB1uv2ZLfYm4V5rzRCcv Msywn3LGqQBhS+y3QBMscraO1687+U1sOPppZog= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+m/HJtmIy1ofARm1D3w 26hgxfc57A+GuZFDYBnYA4Q4YUVKtBEJAve1LSva6DGQbEH/smRL5U2kIV0Eex2+ pKxSMLYE7tubTCWqej42GiTWH6Hv967qubNHQVapMQawxViG8QkcUAz8dl7xNHTy OVgQ4GXi6JM0F4KbxdhOMwx5zqlOiIAsgi3KZMzj0AJ9Aq6W0x4jCpWnHiM94Oad UOtuIWzph+7aiS2affp+zjyHEL4hpPTFSVvl5kr4E7db+c5q83X4Trg63rGBUDJz hIxZ0EW02MyJSsvMJsDXeALC6liYTRxn5bsWVwYP5oF0Syu9Qm1RN4qFPQUOtzU3 SwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 283115539861975931625357213274609999669148 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 01:42:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-18 01:42:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'allulose0.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22206968079105346751104457240697466069477732991450983136339773014349776188190324858297306485717825780728276818285743079460305967020122603710145463188534457915780495265285588319609579935618758845678207460766565046206665521243916138803867228701356174082498271304767552712020294566568527070116206256973282924236272907396335574748742828536272086351190585157461110034473750500646595253288376091955623122144339379534976828737731805616364162011669918751069521976315262296905122777520730427947722062851712052681576906040606847459320580149121734149853198193212500816362322057422316192822795568412132077573185564970406546585419 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9c4860d46ef5a113c188bdaa3609ddfaab149c20 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allulose0.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinacountryhouse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogentechnologies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'critcompendium.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designwebpages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elkhartgarbage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exnary.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gangadin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justgoblue.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monstermagnets.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrifraud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressurewashingcompanieswintergarden.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanfranciscopsilocin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwertberg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoriginalzeolite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ushalfmarathons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.systems' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinniatoken.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ef43bbc570000040300483046022100853ec9c3f036ee9c43f78dec8f8591fdf3e1e5e097307a268d479cb2ee6cdcaf022100d44775a9a7bb6f1f5ae076c922a36871a8a46e9b76478d3da7c17d33a316005f007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ef43bbd1a0000040300473045022015ccdb5bd8a17c27b22a71881066cc969148737eebc3f1c0c0eb4f550fe739ca022100d77e196f1af3fdae0067c8e0d7e8da86741c2f73ec506493b6b69382303b78c3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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