sewbakersfield.com
Issued by R3
About this certificate
This digital certificate with serial number 04:4a:b0:49:f2:1e:be:2e:b0:45:f7:63:4a:7c:d9:60:a1:4f was issued on by Let's Encrypt.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=sewbakersfield.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:4a:b0:49:f2:1e:be:2e:b0:45:f7:63:4a:7c:d9:60:a1:4fSerial Number (int): 373864366954898078672846354787757407117647
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: a9:44:ad:4c:dd:78:e6:b8:3b:15:7d:39:a4:95:04:f3:23:eb:98:65
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 23:e7:80:de:ed:9a:48:2f:1f:ab:aa:a9:9b:5e:b0:6a:d8:46:74:3d
Fingerprint (sha256): 73:ff:e0:07:81:d9:42:78:a3:05:ed:fd:e5:f1:57:14:54:93:b8:0d:ab:3a:75:ad:a7:04:c3:49:80:0c:84:42
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate sewbakersfield.com
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sewbakersfield.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
811.cool.republicanphoto.net
advisorof.com.stopspainfast.net
greenleecounty.com
launchpayments.com.kelloff.com
listofnew.com
nazares.com
sewbakersfield.com
spiritualhemp.com
tenteci.com
watermarkstables.com
advisorof.com.stopspainfast.net
greenleecounty.com
launchpayments.com.kelloff.com
listofnew.com
nazares.com
sewbakersfield.com
spiritualhemp.com
tenteci.com
watermarkstables.com
Other certificates including the domain name sewbakersfield.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for sewbakersfield.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISBEqwSfIevi6wRfdjSnzZYKFPMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTMxODUzNTZaFw0yNDAzMTIxODUzNTVaMB0xGzAZBgNVBAMT EnNld2Jha2Vyc2ZpZWxkLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkjk0c47mOZIgjXGM6K7ad67fMQSmc4X1cah68ntPqrAiLobECPl2g6VflG e4Etk4Pdzmd36MJi8sPBmI1LKcCNeOfEx0vZzftfJ/6JGdLGOOBSe+oG9ZXvVdrz ig43Bd8pMogpylVBKXPCNjk6dWGnmSwUY7J/PEgmulOXm7atGmdfijXkQZfxwGZH pnvFXl+MJnLRzBRChNXCD6xar7C2nUflJU6CMTHVHB2OdCaU6ZZK/zTETaEtaAIb 9zrMwpPKZ9NklDd5ZuaVT268U4fsQCRVtCB4CIfQHRxujzCzL1VfdwlU5t3r5lhL ezZH0xN3rqvJ8Y9QkSLGyNBnQzcCAwEAAaOCAtwwggLYMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUqUStTN145rg7FX05pJUE8yPrmGUwHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wgeQGA1UdEQSB3DCB2YIcODExLmNvb2wucmVwdWJsaWNhbnBob3RvLm5l dIIfYWR2aXNvcm9mLmNvbS5zdG9wc3BhaW5mYXN0Lm5ldIISZ3JlZW5sZWVjb3Vu dHkuY29tgh5sYXVuY2hwYXltZW50cy5jb20ua2VsbG9mZi5jb22CDWxpc3RvZm5l dy5jb22CC25hemFyZXMuY29tghJzZXdiYWtlcnNmaWVsZC5jb22CEXNwaXJpdHVh bGhlbXAuY29tggt0ZW50ZWNpLmNvbYIUd2F0ZXJtYXJrc3RhYmxlcy5jb20wEwYD VR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBIsONr 2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYxkvjiqAAAEAwBHMEUCIGhh P6mSWEzsRlBk83TvvceKJ78EpiDbNUsH/SR1XwI9AiEA0WAmNwHj8tbIm7Wggh83 JRZg7W2TJoQ70UyNf68KOyEAdgCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3ivia bfUX2AAAAYxkvjinAAAEAwBHMEUCIQDqj12vsdUiZiGY+SakXVRgTImKIZKC2CPy 2qj4v+qO/gIgNuxbNFp4S0Ly+OQWziLxcStUyNceuN6Irq7JDz5rAtkwDQYJKoZI hvcNAQELBQADggEBAK9JTh+SuBBN9QbjlFEizYHoydyAQby4q8OWM5u6zAhhPXCf +IKsrNU3ImMM1mg+mAXFTsTFGVzip88ZPrnQoWLNTq1tyjUCL/Uuf2aXbgG04HYs ZnQVRpVatW3SC0/81GRwMEfJG8xtPT1Y/wsQzWpzYN6Alom5svaNvTE3k+Hcon3e /uaWqxLh+hsKjxnRyNq+9yoJPe7wq/4BlB/+pd+gGph8EHpwTa9JMA/QzDTYZ8tP DhSfczfvLT9T8WC3YI/PlKF1AhByebhgz7BauM0jqC1tVZniiT7bz7ORJQjAAzfi X2G5gI0bUXGEdJP9n4CQ2Ww7dZUTy7VoIvqxEno= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySOTRzjuY5kiCNcYzort p3rt8xBKZzhfVxqHrye0+qsCIuhsQI+XaDpV+UZ7gS2Tg93OZ3fowmLyw8GYjUsp wI1458THS9nN+18n/okZ0sY44FJ76gb1le9V2vOKDjcF3ykyiCnKVUEpc8I2OTp1 YaeZLBRjsn88SCa6U5ebtq0aZ1+KNeRBl/HAZkeme8VeX4wmctHMFEKE1cIPrFqv sLadR+UlToIxMdUcHY50JpTplkr/NMRNoS1oAhv3OszCk8pn02SUN3lm5pVPbrxT h+xAJFW0IHgIh9AdHG6PMLMvVV93CVTm3evmWEt7NkfTE3euq8nxj1CRIsbI0GdD NwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 373864366954898078672846354787757407117647 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 18:53:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 18:53:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sewbakersfield.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25391442135158895231460332081312660813670280689515321958862337865210139972958693152463669232232717805090973676162955652825745427398699552843657756870153101616719131135362470056023306395113607640059395325925074753591480759685895995176849113774430506899820465817348250210461579230032318829601349715498758308341065675218303243460438053894659333830729936954645420994851825579113698283665067233918010452042282853043502375865335651290561078367236984886879380881139843230789243271858179589077948412722845328651638925304464980262665361947283024601825893462041649761301716892432761845535200128969601837593373330637530016990007 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a944ad4cdd78e6b83b157d39a49504f323eb9865 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (220 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '811.cool.republicanphoto.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisorof.com.stopspainfast.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenleecounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'launchpayments.com.kelloff.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listofnew.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nazares.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sewbakersfield.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritualhemp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenteci.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watermarkstables.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c64be38aa0000040300473045022068613fa992584cec465064f374efbdc78a27bf04a620db354b07fd24755f023d022100d160263701e3f2d6c89bb5a0821f37251660ed6d9326843bd14c8d7faf0a3b21007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c64be38a70000040300473045022100ea8f5dafb1d522662198f926a45d54604c898a219282d823f2daa8f8bfea8efe022036ec5b345a784b42f2f8e416ce22f1712b54c8d71eb8de88aeaec90f3e6b02d9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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