handmadelovebytanya.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c2:51:08:8c:7c:f4:f8:8a:58:a5:a7:f5:04:6f:fe:5f:9d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=handmadelovebytanya.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c2:51:08:8c:7c:f4:f8:8a:58:a5:a7:f5:04:6f:fe:5f:9d
Serial Number (int): 414571634765173946435040643200000083255197
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6d:0f:b8:fb:20:56:00:1f:8f:e2:cb:87:cc:f4:69:01:a4:e9:65:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:05:13:46:90:52:b1:c4:22:3f:9e:59:5e:fc:c0:dd:0a:e3:14:76
Fingerprint (sha256): 73:40:6c:5f:12:dc:b8:4b:44:55:2d:3f:47:ca:2e:3e:a3:ee:d3:8c:06:fb:e3:11:8e:d6:99:5d:62:c6:4d:e0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate handmadelovebytanya.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for handmadelovebytanya.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

handmadelovebytanya.com
www.handmadelovebytanya.com

Other certificates including the domain name handmadelovebytanya.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for handmadelovebytanya.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISBMJRCIx89PiKWKWn9QRv/l+dMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMjUwOTE3NDlaFw0yNDA1MjUwOTE3NDhaMCIxIDAeBgNVBAMT
F2hhbmRtYWRlbG92ZWJ5dGFueWEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqUf2pGrBfKCKLAcgCKfAstKZnoF465+gZJrM2jOYO7zflubTya9I
Of0Tl01ZRSLKiom2u35X8vB8YptmV5nMSmjbBbhrrLo5+J3nGOo+4vYnmyaK6TOF
EvvXDZE3NQuwFg9sddFsCjG2MpgaVVrruRHD9m9iEl6/h0v9qsx7BB/NLAQaeHbX
T0a0a5d9qc0bL3yqWLIfx4BTq2lTRtFKv8IwadzW+pAkV5NATvLfqAsqp0kWK/CF
tcFYEEET3CUjKqQLVDJQHiQVMTsqQa+vCAoMWOIXtm8HzgGqhyWzQLbEi2VbZS92
4b1qBNZCPRPD/i4BW+WrioV/YiWVA5LgbwIDAQABo4ICNTCCAjEwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBRtD7j7IFYAH4/iy4fM9GkBpOllSDAfBgNVHSMEGDAWgBQU
LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG
FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku
bGVuY3Iub3JnLzA/BgNVHREEODA2ghdoYW5kbWFkZWxvdmVieXRhbnlhLmNvbYIb
d3d3LmhhbmRtYWRlbG92ZWJ5dGFueWEuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIB
MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUASLDja9qmRzQP5WoC+p0w6xxSActW
3SyB2bu/qznYhHMAAAGN38VadwAABAMARjBEAiB6NeSr6FQUviCOkBw0h8MjfNUT
dgyHgQ/RMWsNC+cD2QIgdM3vo/FFExDO0bG3A+GR0mROQDxdu9y4JyoEzPiBklMA
dgCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAY3fxVp2AAAEAwBH
MEUCICTkGfEtHZ0IA1Z7Af7LTFV3mbUVRSc/i5LoiMlvjPOXAiEA274qfMH6U2tr
3zC5z4ARHtzn4hIPy+H+m1somvtFgH4wDQYJKoZIhvcNAQELBQADggEBAB+Rut7B
G54Gb7azTNw8oxFfbshty1WOIAvePEyezlaS57IX26W+GK1x6EfZEjqlWc3noipJ
hCFjlaAKAWdi+2PrzZEOU5ciJmZjs2fcd3uu25/mCDNhD7+EYSlIb0CJI65jAEZS
d5Tylsl7QQTzPoxy6rfcwZ85OHbMYemNiL2afoWbYgkxQcc9Ev7pVp0aRq0VCI1q
EWS7AiOScSsIDwIBs9XxF6QGjvt70LC/lTAwzkQoZNmrP0zLa6bWWpMxTSBrDIT2
OjcdC5gYL5JizbJqyhsCRThDgNymTN3zkbta8aHFIoFvQTmfhK0FxaEU3Y1bPeFW
qJu4plFJdgq5rgQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUf2pGrBfKCKLAcgCKfA
stKZnoF465+gZJrM2jOYO7zflubTya9IOf0Tl01ZRSLKiom2u35X8vB8YptmV5nM
SmjbBbhrrLo5+J3nGOo+4vYnmyaK6TOFEvvXDZE3NQuwFg9sddFsCjG2MpgaVVrr
uRHD9m9iEl6/h0v9qsx7BB/NLAQaeHbXT0a0a5d9qc0bL3yqWLIfx4BTq2lTRtFK
v8IwadzW+pAkV5NATvLfqAsqp0kWK/CFtcFYEEET3CUjKqQLVDJQHiQVMTsqQa+v
CAoMWOIXtm8HzgGqhyWzQLbEi2VbZS924b1qBNZCPRPD/i4BW+WrioV/YiWVA5Lg
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414571634765173946435040643200000083255197
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 09:17:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 09:17:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'handmadelovebytanya.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21369760037236571801568758643776306120801511661555710907283730870681501840375033511629865417998283883999166210215438030148123241643156480601363335660127676632673531582387469392238835681262727494634923616282024503181352711506918210696908594791882897433007130102055935363713911876603580550922156849311234383218663014458196733411885811947667399270862843704646045864020313111407422022556196412431625793085527505820963419210687796904790519662182468954413071079019531314819307635101009516819506791639074661265941290306891411265777868960157530485831080141406418447892213576005823871433085484768693257542885539492625923629167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d0fb8fb2056001f8fe2cb87ccf46901a4e96548
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handmadelovebytanya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handmadelovebytanya.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ddfc55a77000004030046304402207a35e4abe85414be208e901c3487c3237cd513760c87810fd1316b0d0be703d9022074cdefa3f1451310ced1b1b703e191d2644e403c5dbbdcb8272a04ccf8819253007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ddfc55a760000040300473045022024e419f12d1d9d0803567b01fecb4c557799b51545273f8b92e888c96f8cf397022100dbbe2a7cc1fa536b6bdf30b9cf80111edce7e2120fcbe1fe9b5b289afb45807e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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