www.safir.bet

Issued by R3

About this certificate

This digital certificate with serial number 03:c8:94:9b:2d:32:f5:da:7e:df:75:8d:da:e6:4b:c2:1d:ac was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.safir.bet

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:94:9b:2d:32:f5:da:7e:df:75:8d:da:e6:4b:c2:1d:ac
Serial Number (int): 329590862645603601342432368591274640547244
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:8b:10:ef:57:b7:29:f9:e5:ca:76:fd:9c:6f:b6:a3:85:db:79:b2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 22:58:a2:9f:39:e0:28:91:25:0f:fd:4d:b3:6a:d0:79:36:4f:1b:a6
Fingerprint (sha256): 6f:d8:83:a3:9f:cb:d8:55:d4:15:06:f4:4e:1e:06:73:d8:42:32:07:49:ac:b5:2c:cd:85:7e:f2:35:10:42:a8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.safir.bet

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.safir.bet

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amurica.org
anahata.life
aurorasportsmedicine.com
backroads.shop
create.foundation
durgamba.in
homeautomation.solutions
humanist.in
improvement.group
knowledge.bar
ost.life
patent.market
safir.bet
shein.company
stevenkuhn.xyz
www.amurica.org
www.anahata.life
www.aurorasportsmedicine.com
www.backroads.shop
www.create.foundation
www.durgamba.in
www.homeautomation.solutions
www.humanist.in
www.improvement.group
www.knowledge.bar
www.ost.life
www.patent.market
www.safir.bet
www.shein.company
www.stevenkuhn.xyz

Other certificates including the domain name safir.bet

(limited to 100 certificates)
www.safir.bet

Certificate

The complete raw certificate details for www.safir.bet in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Ny2AIy3u1wpVTMecKp
iO2sBBD3RUNgHItHFoAPH5NhHfHNVrJk8hTTU6aXS5vYzAcvQHvjAZC1ydoUD0+j
GifHACSPyJtpwywWhRTN8mQwoDfHp2so0509E0QlnW++PaZAYhnKJIrZZtbeOtvM
vGksfAwD/4qQ1nJu+S5cVW3xZ6aSL0CcqYv8u9KMsurl/mTqrymddlSWLQWn50Ta
Rsnd0YRCNBSJtfgYVKnsgjfmAmkc04acLXzAfsIMGQLU65CS5Aq/OVk/u9NM8Jij
IP2sV0dgrmiGIsOstJDGp19UpQHJEpSHRTdMXd77D40+5LxgWG1bANYog+gtctxs
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329590862645603601342432368591274640547244
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-21 08:49:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-19 08:49:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.safir.bet'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21651569873926141395040453953568645324906860222343869212296989145622109490241041717940026255900845867287222614568337931929059651889704330426902568049668216961678553642977161905210390591572838436052569268521236198184009719799757676424812614792458835059203847103667480819857183183550599726811103264497100493671647978728874481184231567802413139760333573724429152319566765830605123819692325137386695825413328658314409793267891888778283992439443119815217095631801440444159850314830848746543424327007955256425882797850690974520012673986641105894260904882113659816834266372744872136807842174722932020311828566934415570922749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff8b10ef57b729f9e5ca76fd9c6fb6a385db79b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (546 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amurica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anahata.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurorasportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backroads.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'create.foundation'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durgamba.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeautomation.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humanist.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'improvement.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledge.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ost.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patent.market'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safir.bet'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shein.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevenkuhn.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amurica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anahata.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurorasportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backroads.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.create.foundation'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durgamba.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeautomation.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humanist.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.improvement.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knowledge.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ost.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patent.market'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safir.bet'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shein.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stevenkuhn.xyz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018977daa6cc000004030047304502206c7dd69348ce7708a5696a4f7af8dda75e9957c8ed3b1630d744c00ca4be5f4d022100f2fb7e87a5920f973b808855e4164827dc30949c8679bc038b4246d6eaa679cb0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018977daa6d90000040300473045022100df7f7f79d0e5c74f99795fd0a7768b42c2d24f0e08d0d03b089e93c0d31eab39022018804ef431b77e1fe9a7599fb0da83a25647563b6b30dc37ca962540a3233375
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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