fraiss.me

Issued by R3

About this certificate

This digital certificate with serial number 03:d9:7e:12:5d:f4:1d:bf:99:d9:93:ef:6e:76:c8:0f:74:66 was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fraiss.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d9:7e:12:5d:f4:1d:bf:99:d9:93:ef:6e:76:c8:0f:74:66
Serial Number (int): 335345709511541711028045069963255559976038
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:d5:40:6f:17:53:e5:db:34:2b:31:00:72:f4:99:6f:ec:0f:2d:7a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a2:31:b6:0c:1e:fc:df:44:3e:7f:47:42:6f:ce:b5:61:3a:e7:77:7c
Fingerprint (sha256): 7a:18:46:39:7a:78:73:7b:4f:7a:97:92:15:11:23:52:f2:3e:46:a2:4c:eb:d8:35:91:8f:a9:61:d4:f5:51:83

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fraiss.me

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fraiss.me

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.boxio.me
*.elastrion.com
*.fraiss.me
*.importantshow.com
*.pegolfers.com
*.saberacademy.com
*.tgeservices.com
boxio.me
elastrion.com
fraiss.me
importantshow.com
pegolfers.com
saberacademy.com
tgeservices.com
www.boxio.tgeservices.com
www.elastrion.tgeservices.com
www.fraiss.tgeservices.com
www.importantshow.tgeservices.com
www.pegolfers.tgeservices.com
www.saberacademy.tgeservices.com
www.satisfaction.tgeservices.com

Other certificates including the domain name fraiss.me

(limited to 100 certificates)
importantshow.com
fraiss.me
www.saberacademy.tgeservices.com
fraiss.me
fraiss.me
fraiss.me
fraiss.me
www.saberacademy.tgeservices.com
fraiss.tgeservices.com
fraiss.me

Certificate

The complete raw certificate details for fraiss.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QM5jOzLGkMEWvSwJgS0
pwaUokG+29vbU9tGOt0RtzSq5gzFw1wDJC9oj4KaD4CD6f15kdatOPJyDjp8hQrL
8XIRA56HFPRd3O/Idt+F5ebNC5b0a1ATf2rZSWvGokte+OXKruuBr6BQRWNPMvLX
zRXOZ9saf9HHLPgMH2ooZ3rxvTd3hHm/yuyh7SlUabgHs28yTVXK87daEDSOsXNU
4Ty7t039c/P6WNIuwSlM3BAYkNBlvXRbSnXtX+5/vXnBHg9yecCrRaEEMKvmCUdF
zFkCzniLC+ECPizTWJdf+9ZaqCm9njiQ5ckabw6HfBBf8gRzVQb63ru22wtR6yWV
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335345709511541711028045069963255559976038
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-07 21:04:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 21:04:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fraiss.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27900255608898671021682776058306495134056162082151257658775107215459028727668457626180861521982489801177498491789146035380938663397391602331004663086252178854105515088580428907550971410877129652473210934498137929216417720536629011843848515909140674473739379595170281505868289292313859362314236285614773355664210737967747694515431197759368706272117205592871629894342411933124306117214562924037350837077900115893043723676339330895746216992693136589258993605952914046489961941558978634118511107166314871447642987262830664783727552230681420300773779682053548768763134016907193986734464048485024851617760551037587681547551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39d5406f1753e5db342b310072f4996fec0f2d7a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (448 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boxio.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elastrion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fraiss.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.importantshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pegolfers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saberacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tgeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxio.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elastrion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraiss.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'importantshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pegolfers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saberacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boxio.tgeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elastrion.tgeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fraiss.tgeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.importantshow.tgeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pegolfers.tgeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saberacademy.tgeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satisfaction.tgeservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b0c2b4778000004030047304502206b388b064fbe6781164b6c91cf536673c46b1abf287fa9c82ec0c2a2f89f47960221008c8ab36afffd7ed8457334deceee545e858168959aa8236ac30bcdb71a3d49b0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b0c2b478800000403004730450221009a413ccd31346b8a176d00383ad1fcda3ff2d13c426d0e957ca8fd46f4cf98e6022024432fb3826206d21e64b1db4f1c0c2aea837b1231755d41b82704dd32da4a62
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00107d46a22a52d955770d985e591de6b71fe28ef2654cb75eb2efe09271c21d386f5b1b6ba56bc216cc3408c2f03fd086bfa0e07eeae56f15d1bbf20f3516a79a7ed99776eef53901ef2b28e34cc218ccc99b9ebe287208c8d7f176f37d52833837574049b3ea71f68e2ee7116fe8c324d093c6731aeb525c64e4f2cef1d102ca59a3bea0bb35cb2aab1007750f1fb07d3aae5f8e7a6bc801ce60e88e570da8d80ef059e96432045a864cc2dbd8f691ac31dc6f8b71a07777b6a2f66467a5b609d4380779e57a5ce8843ed32e873ea6ee6b70aa6430365c04ee39253a9111a01919addcfbfbcc460fd556c1eba237bf1f26f34383a18fcf1f7875c71a6d3f5e44