sewbakersfield.com

Issued by R3

About this certificate

This digital certificate with serial number 04:4a:b0:49:f2:1e:be:2e:b0:45:f7:63:4a:7c:d9:60:a1:4f was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sewbakersfield.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4a:b0:49:f2:1e:be:2e:b0:45:f7:63:4a:7c:d9:60:a1:4f
Serial Number (int): 373864366954898078672846354787757407117647
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a9:44:ad:4c:dd:78:e6:b8:3b:15:7d:39:a4:95:04:f3:23:eb:98:65
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 23:e7:80:de:ed:9a:48:2f:1f:ab:aa:a9:9b:5e:b0:6a:d8:46:74:3d
Fingerprint (sha256): 73:ff:e0:07:81:d9:42:78:a3:05:ed:fd:e5:f1:57:14:54:93:b8:0d:ab:3a:75:ad:a7:04:c3:49:80:0c:84:42

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sewbakersfield.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sewbakersfield.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

811.cool.republicanphoto.net
advisorof.com.stopspainfast.net
greenleecounty.com
launchpayments.com.kelloff.com
listofnew.com
nazares.com
sewbakersfield.com
spiritualhemp.com
tenteci.com
watermarkstables.com

Other certificates including the domain name sewbakersfield.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sewbakersfield.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySOTRzjuY5kiCNcYzort
p3rt8xBKZzhfVxqHrye0+qsCIuhsQI+XaDpV+UZ7gS2Tg93OZ3fowmLyw8GYjUsp
wI1458THS9nN+18n/okZ0sY44FJ76gb1le9V2vOKDjcF3ykyiCnKVUEpc8I2OTp1
YaeZLBRjsn88SCa6U5ebtq0aZ1+KNeRBl/HAZkeme8VeX4wmctHMFEKE1cIPrFqv
sLadR+UlToIxMdUcHY50JpTplkr/NMRNoS1oAhv3OszCk8pn02SUN3lm5pVPbrxT
h+xAJFW0IHgIh9AdHG6PMLMvVV93CVTm3evmWEt7NkfTE3euq8nxj1CRIsbI0GdD
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373864366954898078672846354787757407117647
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 18:53:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 18:53:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sewbakersfield.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25391442135158895231460332081312660813670280689515321958862337865210139972958693152463669232232717805090973676162955652825745427398699552843657756870153101616719131135362470056023306395113607640059395325925074753591480759685895995176849113774430506899820465817348250210461579230032318829601349715498758308341065675218303243460438053894659333830729936954645420994851825579113698283665067233918010452042282853043502375865335651290561078367236984886879380881139843230789243271858179589077948412722845328651638925304464980262665361947283024601825893462041649761301716892432761845535200128969601837593373330637530016990007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a944ad4cdd78e6b83b157d39a49504f323eb9865
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (220 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '811.cool.republicanphoto.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisorof.com.stopspainfast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenleecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'launchpayments.com.kelloff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listofnew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nazares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sewbakersfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritualhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenteci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watermarkstables.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c64be38aa0000040300473045022068613fa992584cec465064f374efbdc78a27bf04a620db354b07fd24755f023d022100d160263701e3f2d6c89bb5a0821f37251660ed6d9326843bd14c8d7faf0a3b21007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c64be38a70000040300473045022100ea8f5dafb1d522662198f926a45d54604c898a219282d823f2daa8f8bfea8efe022036ec5b345a784b42f2f8e416ce22f1712b54c8d71eb8de88aeaec90f3e6b02d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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