yessika.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c2:e1:90:ae:ea:e8:dc:34:6a:e0:da:9b:ad:cd:c4:88:90 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=yessika.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c2:e1:90:ae:ea:e8:dc:34:6a:e0:da:9b:ad:cd:c4:88:90
Serial Number (int): 414763750447253011382194127284816725706896
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 30:20:a1:78:1d:39:03:0c:fb:12:98:e4:75:6b:1c:67:64:2f:f2:a4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e6:88:34:86:54:d0:13:88:33:2d:54:b7:e9:62:2e:10:8e:9d:a5:21
Fingerprint (sha256): 72:fd:5c:37:40:9b:9a:71:8e:d9:72:8d:90:a1:e8:d0:8f:60:2c:0d:60:f1:ce:a6:e9:59:f6:70:4c:1c:00:10

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate yessika.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yessika.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yessika.com

Other certificates including the domain name yessika.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for yessika.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414763750447253011382194127284816725706896
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 12:18:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 12:18:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yessika.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834499216929413622116716523927927458776939542811354332027020383973232657344509304864040622761838668784214801359544485502974116435337261169890729527025167634313267291192783208466587570537486996211965811277274836916654452542461196713007137339725420116453574515780436022566400893754676593418808842170249895642872807230548662389179119513358799440924171649377928317607586789310435910814675749696923865074869410410594800304876311156331052365766665305241699079417923314429645387528479661530307941005520084823084046361468369382795162037343093589775515135619406814363910739737054795399206026241182847209037986916594219061235891561066670942536951657481343931330890968790883743336691966092695735644979295979556581078598415711607574566822837012558571757725890562674282867130015714167737008718443944863924020539501876294222010420180444660242280394870781597652528882257789160181233496027209434531722691797517943324459216165952454761115723551335458331336133302526393291271668796904968298274224037779834324039898436330856327850057746280999416465958701735986016377131605400850189285168095874874512308784247210164458847998069394595895126417801813016763115371972474710439340839366547771839386866690524839485314324828454494135585463452092161673493101711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3020a1781d39030cfb1298e4756b1c67642ff2a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yessika.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e4c9057ea0000040300473045022100e0e6ee1a91b8d322d3176962a8df681c8ebd322b8c6baa86a5adc7afce5991c502201af753852725ec1f8f1a51ffa6656a976e04eea5098e3f124fe50a255d2333e8007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e4c9057f0000004030047304502204f783746935120c0a76b67459d1890f9e3f1f3629079d5479cf47d754e4eacd70221009274d475dfc7b8568cf0457a938417c5f372e670302820bc1dea9ae238ba77cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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