sl.itsdandi.com
Issued by R3
About this certificate
This digital certificate with serial number 04:03:0e:b7:3d:44:6e:5f:a5:65:90:e3:0a:df:58:97:69:87 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=sl.itsdandi.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:03:0e:b7:3d:44:6e:5f:a5:65:90:e3:0a:df:58:97:69:87Serial Number (int): 349489551452718562526381509401824445557127
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2f:4e:76:d4:a5:99:99:d8:e7:e1:ae:96:b4:c0:3f:14:76:d8:3c:02
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 67:7f:a0:bc:f4:8f:5e:7f:93:e7:45:83:3d:97:a3:02:e2:03:55:c1
Fingerprint (sha256): 7e:e5:81:f5:2b:05:72:14:1e:23:f3:37:0f:00:55:6d:ea:ce:4f:8d:38:e4:4f:e8:4c:9e:2c:21:91:44:0a:99
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate sl.itsdandi.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sl.itsdandi.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sl.itsdandi.com
Other certificates including the domain name itsdandi.com
(limited to 100 certificates)
carspa.app
app.bakbuck.com
web-adhoc.ighost.jp
cavalomagico.com
www.meomeo.cf
sms-check.co
support.itsdandi.com
link.shelter.id
admin-dev.mabl.com
cliftleighcarwash.com.au
support.itsdandi.com
www.healthqr.co
5keyshifts.itsdandi.com
www.nathandimmer.com
pa.sase.paloaltonetworks.com
www.vivacommuart.org
sahs12.com
imp.biibiic.com
accounts.itsdandi.com
storygoes.co
app.itsdandi.com
www.beta7.app
robplumbgardenservices.co.uk
www.covidatmetu.com
pamiatki.kucza.xyz
app.itsdandi.com
codelco.risk0-piloto.oraculus.cl
api.voudefly.com.br
dev-portal.rxcap.com
www.pharmaplast.in
app.itsdandi.com
*.itsdandi.com
snomed.dev
app.brainlamp.io
www.shaperburger.uy
icecreamdevs.cf
www.beta7.app
airdrop.sync-pad.xyz
alerts.itsdandi.com
carsonpoole.com
rescueme.app
support.itsdandi.com
www.humancapitalos.com
collect.itsdandi.com
sl.itsdandi.com
www.scotti.co.za
rtila.ikajian.com
www.smartysvadba.sk
demo-multi-region-service.itsdandi.com
Dandi Technologies, Inc.
www.hermanosquiros.com
friday.tools.bobthecoder.org
www.clickthecat.com
todayilearned.co
www.guzuli.com
chemtov.org
equiren.dev
www.linewaysolutions.com
officermedicalcentre.com.au
www.antandtracy.com
testiapp.indoors.fi
itsdandi.com
getitt.app
www.store.blackpugstudio.com
support.itsdandi.com
www.gobusinessinc.com
imaginationchildcare.com
app.notedojo.com
hantsch-app.speakylink.com
virgilemalfatti.fr
metrics.itsdandi.com
Dandi Technologies, Inc.
app.brainlamp.io
p.mss.io
decideup.com
itsdandi.com
sutny.com
marco-santana.com
www.itsdandi.com
admin-dev.handypass.com
www.ozarkglade.com
purecloud-console.com
www.dittech.dk
demo.anevent.co.za
bubblekitchen.lt
indxsign.studio
geriatriacoracaodemaria.com.br
www.directedworks.com
geriatriacoracaodemaria.com.br
app.bakbuck.com
web-adhoc.ighost.jp
cavalomagico.com
www.meomeo.cf
sms-check.co
support.itsdandi.com
link.shelter.id
admin-dev.mabl.com
cliftleighcarwash.com.au
support.itsdandi.com
www.healthqr.co
5keyshifts.itsdandi.com
www.nathandimmer.com
pa.sase.paloaltonetworks.com
www.vivacommuart.org
sahs12.com
imp.biibiic.com
accounts.itsdandi.com
storygoes.co
app.itsdandi.com
www.beta7.app
robplumbgardenservices.co.uk
www.covidatmetu.com
pamiatki.kucza.xyz
app.itsdandi.com
codelco.risk0-piloto.oraculus.cl
api.voudefly.com.br
dev-portal.rxcap.com
www.pharmaplast.in
app.itsdandi.com
*.itsdandi.com
snomed.dev
app.brainlamp.io
www.shaperburger.uy
icecreamdevs.cf
www.beta7.app
airdrop.sync-pad.xyz
alerts.itsdandi.com
carsonpoole.com
rescueme.app
support.itsdandi.com
www.humancapitalos.com
collect.itsdandi.com
sl.itsdandi.com
www.scotti.co.za
rtila.ikajian.com
www.smartysvadba.sk
demo-multi-region-service.itsdandi.com
Dandi Technologies, Inc.
www.hermanosquiros.com
friday.tools.bobthecoder.org
www.clickthecat.com
todayilearned.co
www.guzuli.com
chemtov.org
equiren.dev
www.linewaysolutions.com
officermedicalcentre.com.au
www.antandtracy.com
testiapp.indoors.fi
itsdandi.com
getitt.app
www.store.blackpugstudio.com
support.itsdandi.com
www.gobusinessinc.com
imaginationchildcare.com
app.notedojo.com
hantsch-app.speakylink.com
virgilemalfatti.fr
metrics.itsdandi.com
Dandi Technologies, Inc.
app.brainlamp.io
p.mss.io
decideup.com
itsdandi.com
sutny.com
marco-santana.com
www.itsdandi.com
admin-dev.handypass.com
www.ozarkglade.com
purecloud-console.com
www.dittech.dk
demo.anevent.co.za
bubblekitchen.lt
indxsign.studio
geriatriacoracaodemaria.com.br
www.directedworks.com
geriatriacoracaodemaria.com.br
Certificate
The complete raw certificate details for sl.itsdandi.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIID+DCCAuCgAwIBAgISBAMOtz1Ebl+lZZDjCt9Yl2mHMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDMwNjAxMDRaFw0yNDA3MDIwNjAxMDNaMBoxGDAWBgNVBAMT D3NsLml0c2RhbmRpLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMUO1r9aZke0u6az9unyMRyCFyQGHb9spPudN0Yr88OpzOyIj49NLxG3Nidm7OV2 HHRlHc5LgK/2dzAev9scPkgwVPwAmlKXi+dBc4U4rH1ijZ4Xdv/6/RIitCtaGw/n RMht0n/FKSHzQoXyRCGkgycQWqaXKeai1cu7A7gBlJoKc+iqM/dR/Pqv3fd8GzxA wvS9q54os5fVY/An4j/M5iehuryRK0ZIXBcy6aAt9Fmr4Gjot6OtZYGlqq2E7wUC wXc8kwxfuhOnOn9sTEU3dZomsI/ljBCu09XuUfk/4l0PckK+3ioIpBZGmEoC0gXn 5cr/VBXXuo8cve66GqYWBKMCAwEAAaOCAR4wggEaMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUL0521KWZmdjn4a6WtMA/FHbYPAIwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wGgYDVR0RBBMwEYIPc2wuaXRzZGFuZGkuY29tMBMGA1UdIAQMMAowCAYGZ4EM AQIBMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeiDB/ oTSZMIk81W6PGj2GmJPp+oNFAXD7Qo4jJQmiKMKCtQ8CfQDr/r9cKlm50/Mzfrfm v+IxIisMLc5kMdmq6DIJuIRz+R7lvfUqFNN8omhsgyJOiRAqCkfs+OVkr9+x0Tw3 zTZLr2T2EkYyWQzBeoIk7lmNAHSkEMlsHJxQEYY9wnlo+lKAwuTGKfaFXitE8Nen IqiigJzzaM42PlMlWfXBqwVKbDZHvd1NADB/gNB1LTsQ227Ltvvb8PW+wN4NeNom RsQg4/hAdrCgyQU+qe5uM5221XAIXlg3zw7RdKfn+T35L9BrIg1kjnM4H1OWl7nk RUnH8DCZm4YBQ8d8 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ7Wv1pmR7S7prP26fIx HIIXJAYdv2yk+503Rivzw6nM7IiPj00vEbc2J2bs5XYcdGUdzkuAr/Z3MB6/2xw+ SDBU/ACaUpeL50FzhTisfWKNnhd2//r9EiK0K1obD+dEyG3Sf8UpIfNChfJEIaSD JxBappcp5qLVy7sDuAGUmgpz6Koz91H8+q/d93wbPEDC9L2rniizl9Vj8CfiP8zm J6G6vJErRkhcFzLpoC30WavgaOi3o61lgaWqrYTvBQLBdzyTDF+6E6c6f2xMRTd1 miawj+WMEK7T1e5R+T/iXQ9yQr7eKgikFkaYSgLSBeflyv9UFde6jxy97roaphYE owIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 349489551452718562526381509401824445557127 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 06:01:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 06:01:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sl.itsdandi.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24876263391576533232863054393079060497708620851963850833693776011392236671184784559545701478028845831690994557531436517798414662647742999699116035777021383710962836702312641714171764239578151886744647821877095870859317007118205252866269826421394580870668747002463255938240174157020278397991871634812144578299382604065957965968183309885084699038697838820390891078610987026092907666373303773335972069504815739538778075251958058122874356215347128284668314180350388200797148601289372615502974580611590133658171672405483262756141933106583093321684590370706353979384569864616835670436568932876328484698068428477587736888483 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2f4e76d4a59999d8e7e1ae96b4c03f1476d83c02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sl.itsdandi.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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