tahoe.wine
Issued by R3
About this certificate
This digital certificate with serial number 04:98:13:98:87:60:38:41:98:6d:f0:67:d8:5d:34:19:39:0e was issued on by Let's Encrypt.
With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=tahoe.wine
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:98:13:98:87:60:38:41:98:6d:f0:67:d8:5d:34:19:39:0eSerial Number (int): 400198110805814654283214124778557806295310
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e1:12:ee:ef:4d:8e:e5:e0:21:30:a8:4d:3b:77:6d:2f:d2:e1:80:ef
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 33:a5:d2:23:40:b2:aa:de:94:37:51:d4:df:32:b8:d7:94:12:87:db
Fingerprint (sha256): 79:c4:be:0b:6a:93:b3:09:db:db:b4:35:39:63:8e:27:45:da:47:e0:80:81:fa:5f:cb:8e:0f:25:d2:fd:73:ae
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate tahoe.wine
19
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tahoe.wine
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
atokacounty.com
bankruptcysurvival.com
burlingtonjunction.com
crystalforillinois.com
dragspot.com
easter.istlm.com
etechtvnews.com
gemologist.in
getridofbamboo.com
heidis-real-estate.com
helpyoulive.com
jodhpurdental.in
lgbtqski.com
rxdpp4.com
sxmfree.com
tahoe.wine
texasnetworksystems.com
tudeladeduero.com
www.projectmojo.net
bankruptcysurvival.com
burlingtonjunction.com
crystalforillinois.com
dragspot.com
easter.istlm.com
etechtvnews.com
gemologist.in
getridofbamboo.com
heidis-real-estate.com
helpyoulive.com
jodhpurdental.in
lgbtqski.com
rxdpp4.com
sxmfree.com
tahoe.wine
texasnetworksystems.com
tudeladeduero.com
www.projectmojo.net
Other certificates including the domain name tahoe.wine
(limited to 100 certificates)
Certificate
The complete raw certificate details for tahoe.wine in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgISBJgTmIdgOEGYbfBn2F00GTkOMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTUwNDE1NTVaFw0yNDA3MTQwNDE1NTRaMBUxEzARBgNVBAMT CnRhaG9lLndpbmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vvj/ PDhP4SrwWVg1cmOrrbt7Zmv2D0mtlyXPgBk/FFFWHLHUElQWdxgeNEvbeVJnvIXr Jq33PG5zvsOARRK4fD0VqW4X4BTbbAKWPDRn5/qiX9fgHOuyTaVKcH976pVz+4aO utfqwXIuZ218xNQN9eXgzhvTg4b3TOvelkNLS0OAm4eabkZ2d+3zCluaB8MB874V aayw1RJuFvkzfMZ3uYWeHjPJvwEYbn1y8yY3E4S6aUtCV7lCSL7ac7UrTsMA/rSe SITbZPixlHiB1Lmv3ZXwam0/PuvSzWuzHaR4jC3n7neutmZcZ7Rqo96r9jhjPOnv JS+z1mnIj5RT0FQ5AgMBAAGjggNiMIIDXjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FOES7u9NjuXgITCoTTt3bS/S4YDvMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIB aQYDVR0RBIIBYDCCAVyCD2F0b2thY291bnR5LmNvbYIWYmFua3J1cHRjeXN1cnZp dmFsLmNvbYIWYnVybGluZ3Rvbmp1bmN0aW9uLmNvbYIWY3J5c3RhbGZvcmlsbGlu b2lzLmNvbYIMZHJhZ3Nwb3QuY29tghBlYXN0ZXIuaXN0bG0uY29tgg9ldGVjaHR2 bmV3cy5jb22CDWdlbW9sb2dpc3QuaW6CEmdldHJpZG9mYmFtYm9vLmNvbYIWaGVp ZGlzLXJlYWwtZXN0YXRlLmNvbYIPaGVscHlvdWxpdmUuY29tghBqb2RocHVyZGVu dGFsLmluggxsZ2J0cXNraS5jb22CCnJ4ZHBwNC5jb22CC3N4bWZyZWUuY29tggp0 YWhvZS53aW5lghd0ZXhhc25ldHdvcmtzeXN0ZW1zLmNvbYIRdHVkZWxhZGVkdWVy by5jb22CE3d3dy5wcm9qZWN0bW9qby5uZXQwEwYDVR0gBAwwCjAIBgZngQwBAgEw ggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+F auvBvyiF7PhkbgAAAY7gLvAUAAAEAwBIMEYCIQDIIxr5hZ6QSQ3/fsjhzGmmK8IJ stZPL5QENowHT4w1EgIhAJCUE56JUyAJ/btpZcbntYMA2O5IcFVxfi6Z/a7vOVy6 AHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGO4C7wFAAABAMA RjBEAiB+47tlKcIo9zNAVr4KkwWKH3DZ5faC989kBFkKBGb1JAIgYkuL9rjM35Ob e67ILCtSQ/Y6jQOKRhE5lDaI02vXKrEwDQYJKoZIhvcNAQELBQADggEBABq57w17 PcgTtQBT/6lCakAgWSqNCn1QpE6At7FzvzHGCEhLs7lnrwOnodmgtrzVZLepDtD4 Y00cmTkzJM8bY7+EpSOG/2hi8VQ94Ti94B9F3tSWHa48cz50NtImke/FNzQhoKQQ sgJuOPVln/QHzeum0T+BAB9KvPiGGPF+32VPa+NBo2LXulsi2QyI6RkaojqHpvxv 4sgkghbgzwuCanfbkqrlwmxTsELuFlpMEdQmk3188j7rNfCi/U63oAg10HGQ9IGh +PGRIjkBMDOro/TGcwGQv94m5L6gFBMrt4czOcbac9Koial2QoIncaRXHRv0tiT3 1B0G7CkxEKzwW04= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb74/zw4T+Eq8FlYNXJj q627e2Zr9g9JrZclz4AZPxRRVhyx1BJUFncYHjRL23lSZ7yF6yat9zxuc77DgEUS uHw9FaluF+AU22wCljw0Z+f6ol/X4Bzrsk2lSnB/e+qVc/uGjrrX6sFyLmdtfMTU DfXl4M4b04OG90zr3pZDS0tDgJuHmm5Gdnft8wpbmgfDAfO+FWmssNUSbhb5M3zG d7mFnh4zyb8BGG59cvMmNxOEumlLQle5Qki+2nO1K07DAP60nkiE22T4sZR4gdS5 r92V8GptPz7r0s1rsx2keIwt5+53rrZmXGe0aqPeq/Y4Yzzp7yUvs9ZpyI+UU9BU OQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 400198110805814654283214124778557806295310 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 04:15:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 04:15:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tahoe.wine' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22943305319742316118702818278767928969084089920728284799512632334704321287848492323366186933352040013642359538078020790354723539190071129653437346826505913090838817012437440564700329058146221849052195373251356317480395807675547649927954523231797281111884858580489173428866038003424481953607102108677977221117374997993746765708126116048443096661454540145904536882648088362104490232986246581269443296088483764120332637313960577588497111894491525224624647175732101754797812699654271835977390441445198252665215489630565787514744744642321686754486351502644298203707723541701475906484521219097816597864087308852313191371833 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e112eeef4d8ee5e02130a84d3b776d2fd2e180ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (352 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atokacounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankruptcysurvival.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burlingtonjunction.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystalforillinois.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dragspot.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easter.istlm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etechtvnews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemologist.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getridofbamboo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heidis-real-estate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpyoulive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jodhpurdental.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqski.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxdpp4.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sxmfree.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tahoe.wine' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasnetworksystems.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tudeladeduero.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectmojo.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ee02ef0140000040300483046022100c8231af9859e90490dff7ec8e1cc69a62bc209b2d64f2f9404368c074f8c35120221009094139e89532009fdbb6965c6e7b58300d8ee487055717e2e99fdaeef395cba00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ee02ef014000004030046304402207ee3bb6529c228f7334056be0a93058a1f70d9e5f682f7cf6404590a0466f5240220624b8bf6b8ccdf939b7baec82c2b5243f63a8d038a461139943688d36bd72ab1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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