donate.galandnsoil.us.omeia.nl
Issued by R3
About this certificate
This digital certificate with serial number 04:f3:74:02:6b:01:73:5a:02:fa:42:43:56:a1:df:59:1a:b0 was issued on by Let's Encrypt.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=donate.galandnsoil.us.omeia.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:f3:74:02:6b:01:73:5a:02:fa:42:43:56:a1:df:59:1a:b0Serial Number (int): 431291961891266555865765139734963865328304
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 39:5c:08:63:4e:e0:96:42:97:58:09:14:93:6f:57:13:7f:3c:de:da
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 27:3c:48:7a:c3:b6:c5:c4:aa:e3:16:9b:7c:f0:6d:40:c0:87:3e:c6
Fingerprint (sha256): 73:b0:46:4b:d9:01:9c:05:b7:b2:8c:cb:09:60:fb:f4:a2:17:aa:00:3e:6b:3a:3b:ec:42:d3:32:2c:35:64:6a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate donate.galandnsoil.us.omeia.nl
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for donate.galandnsoil.us.omeia.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
adflegal.sex
americansday.com.nomaddevelopers.com
donate.galandnsoil.us.omeia.nl
immeasurablymoreministries.com
liquorpalace.com
newbritishspares.co
oks.co.in
raresportsmemorabilia.com
simplexmechanicals.net.gulfshorehomewatchconcierge.com
americansday.com.nomaddevelopers.com
donate.galandnsoil.us.omeia.nl
immeasurablymoreministries.com
liquorpalace.com
newbritishspares.co
oks.co.in
raresportsmemorabilia.com
simplexmechanicals.net.gulfshorehomewatchconcierge.com
Other certificates including the domain name omeia.nl
(limited to 100 certificates)
reelstopixels.com.omeia.nl
sale.nano.bible
immerse.marketing
basicjurisdictionalprinciples.org
sculpit.media
sale.nano.bible
sculpit.media
leaselock.ca
sale.nano.bible
jenksamericatoastmasters.club
sculpit.media
usc.mba
sculpit.media
jenksamericatoastmasters.club
us1tv.tel
1031.trade
shepper.ae
donate.galandnsoil.us.omeia.nl
summercampsanantonio.com.omeia.nl
impossible.ca
impossible.ca
omeia.nl
prothena.org
sculpit.media
landbug.club
lease.club
impossible.ca
playgolf.club
radiator.cc
impossible.ca
playgolf.club
apopka.work
34755625397.ca
caremap.org
jenksamericatoastmasters.club
sale.nano.bible
lease.club
omeia.nl
sale.nano.bible
immerse.marketing
basicjurisdictionalprinciples.org
sculpit.media
sale.nano.bible
sculpit.media
leaselock.ca
sale.nano.bible
jenksamericatoastmasters.club
sculpit.media
usc.mba
sculpit.media
jenksamericatoastmasters.club
us1tv.tel
1031.trade
shepper.ae
donate.galandnsoil.us.omeia.nl
summercampsanantonio.com.omeia.nl
impossible.ca
impossible.ca
omeia.nl
prothena.org
sculpit.media
landbug.club
lease.club
impossible.ca
playgolf.club
radiator.cc
impossible.ca
playgolf.club
apopka.work
34755625397.ca
caremap.org
jenksamericatoastmasters.club
sale.nano.bible
lease.club
omeia.nl
Certificate
The complete raw certificate details for donate.galandnsoil.us.omeia.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgISBPN0AmsBc1oC+kJDVqHfWRqwMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMjQxNTQzNDhaFw0yNDAzMjMxNTQzNDdaMCkxJzAlBgNVBAMT HmRvbmF0ZS5nYWxhbmRuc29pbC51cy5vbWVpYS5ubDCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBALRGzW1vjQjjyIcfF3ICPyLRx8AphzdQneUyf7/zDH1O g2zYzWt9b+MdEgafQblhxWdM+m+mFqkz65cMvFL8y6L2xhnLZX0STClxafW9DKRM aBIIH70C2UYZUCEVYLYXr5xOjfaGLhOVEfXyMigeZXTynYCnPU1xPZ59BOW7aTB1 HNkTdokfENHvyWuJblsrQPu4AGIsCuozAVNJYWCcybUsAqEASZTKuLDbGz8fV7aF z4H4noidWnMBlbYm6ClHB6bDJyUgH6+/94cE8b4yRVzPOHcGuOSxlWUmsE2NSCqu sw3afv34SNHtzZfHKT21T4r0B7MiKbDX9gY/SlL6FjsCAwEAAaOCAv4wggL6MA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUOVwIY07glkKXWAkUk29XE3883towHwYDVR0j BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6 Ly9yMy5pLmxlbmNyLm9yZy8wggEEBgNVHREEgfwwgfmCDGFkZmxlZ2FsLnNleIIk YW1lcmljYW5zZGF5LmNvbS5ub21hZGRldmVsb3BlcnMuY29tgh5kb25hdGUuZ2Fs YW5kbnNvaWwudXMub21laWEubmyCHmltbWVhc3VyYWJseW1vcmVtaW5pc3RyaWVz LmNvbYIQbGlxdW9ycGFsYWNlLmNvbYITbmV3YnJpdGlzaHNwYXJlcy5jb4IJb2tz LmNvLmlughlyYXJlc3BvcnRzbWVtb3JhYmlsaWEuY29tgjZzaW1wbGV4bWVjaGFu aWNhbHMubmV0Lmd1bGZzaG9yZWhvbWV3YXRjaGNvbmNpZXJnZS5jb20wEwYDVR0g BAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwCi4r/WHt4v Lweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAYycthfyAAAEAwBIMEYCIQDwKB4z +jM6wYlbX51ld3XOpIkLbwCpRojb9PfJadeHFAIhAP7nour6ZBw8LX4YVILykvq+ gIuHHNsxSob1IkULR00LAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEf tZsAAAGMnLYX/QAABAMARzBFAiBd5pyFDt7pqALOj4jwce/PjNHZ077VDh41FjoO RsfAqQIhAPXCbuAEdLekBWsnNjTxFFKo/mtFRLhsNUlG676T3dnkMA0GCSqGSIb3 DQEBCwUAA4IBAQABq4YnBZ+OU8bhqS+nNpGW92lQMuP1qumiVJ/7SeTADaqC9M9k DjySHvCFjulD1cnOLXJonCOx4CkB99VWIUMLkZBnxgL/Y1VGK4m4hx8Xs8/6F3ke l/QIrHm0XO8iGsb9k6IXuWG33czk4bRiWmN6qxI9ehVU2VHQ6ahFF2LDdEWFSC3x fH0g/p+GrWjROcbbGJvB9HOA4LP8sEHZJEzWyBAANO5/F1oezxYBPilkpm4kq2CU UZRGneuDIihfC0Dfq1bKXmjUA4v+BGWgcKxwYvpSNuAPA0HYQd3S+IZESHCL6DAq 2w8/32I0lXNh1do923eeDQ4xuLtVGHxBFTAT -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEbNbW+NCOPIhx8XcgI/ ItHHwCmHN1Cd5TJ/v/MMfU6DbNjNa31v4x0SBp9BuWHFZ0z6b6YWqTPrlwy8UvzL ovbGGctlfRJMKXFp9b0MpExoEggfvQLZRhlQIRVgthevnE6N9oYuE5UR9fIyKB5l dPKdgKc9TXE9nn0E5btpMHUc2RN2iR8Q0e/Ja4luWytA+7gAYiwK6jMBU0lhYJzJ tSwCoQBJlMq4sNsbPx9XtoXPgfieiJ1acwGVtiboKUcHpsMnJSAfr7/3hwTxvjJF XM84dwa45LGVZSawTY1IKq6zDdp+/fhI0e3Nl8cpPbVPivQHsyIpsNf2Bj9KUvoW OwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 431291961891266555865765139734963865328304 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 15:43:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 15:43:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'donate.galandnsoil.us.omeia.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22757808883793618202301450628494168583991105539136340532068857392588566864088990795368375891752212015771157795761594182729840459284092779445953789137180964515751131516718398182306137102407006595106172228310543920251103000346842083063076501560794800676663098417354292954105449370400348001187852399579215167204507479459424219704383648161293016198788570832092290318107914697187131152266494740119036864262881785812481554189644353933986472848097761259585331015254653201086225909081899875629508236019228110532804121501312439034548999896752088026937664007849122328039189389043863622909527533258047551296157208123638172751419 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 395c08634ee0964297580914936f57137f3cdeda . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (252 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adflegal.sex' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americansday.com.nomaddevelopers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.galandnsoil.us.omeia.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immeasurablymoreministries.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquorpalace.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbritishspares.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oks.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raresportsmemorabilia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplexmechanicals.net.gulfshorehomewatchconcierge.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c9cb617f20000040300483046022100f0281e33fa333ac1895b5f9d657775cea4890b6f00a94688dbf4f7c969d78714022100fee7a2eafa641c3c2d7e185482f292fabe808b871cdb314a86f522450b474d0b007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c9cb617fd000004030047304502205de69c850edee9a802ce8f88f071efcf8cd1d9d3bed50e1e35163a0e46c7c0a9022100f5c26ee00474b7a4056b273634f11452a8fe6b4544b86c354946ebbe93ddd9e4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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