mindreadingapp.com

Issued by R3

About this certificate

This digital certificate with serial number 03:95:19:df:c2:bd:7b:88:9c:69:41:d5:34:43:7b:7c:ab:2a was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mindreadingapp.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:95:19:df:c2:bd:7b:88:9c:69:41:d5:34:43:7b:7c:ab:2a
Serial Number (int): 312073322998394464791668610786738438974250
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 56:85:de:5e:54:28:b7:3f:f3:31:60:34:29:a2:1d:5d:89:8c:f6:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0e:54:40:bc:82:76:9a:5d:83:38:a4:74:8a:1f:e9:2b:82:0d:18:cd
Fingerprint (sha256): 7f:e3:5f:0c:2c:a9:06:6b:16:ae:44:cd:b2:40:b7:c6:ed:70:62:fc:d3:e3:a6:fa:86:a0:bf:b5:ba:1d:18:18

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mindreadingapp.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mindreadingapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

concert4vip.com
creditforvip.com
freshledger.com
mindreadingapp.com
minnesotatreatmentfinder.com
mymugsup.com
nantucketbuyerbroker.com
noncompliantnj.com
portotrip.com
saltlakeprp.com
shstandingoffer.com
staf.ca
tuyasmarthome.com
www.concert4vip.com
www.creditforvip.com
www.freshledger.com
www.mindreadingapp.com
www.minnesotatreatmentfinder.com
www.mymugsup.com
www.nantucketbuyerbroker.com
www.noncompliantnj.com
www.portotrip.com
www.saltlakeprp.com
www.shstandingoffer.com
www.staf.ca
www.tuyasmarthome.com
www.xn--qebd.com
www.yourdailycup.com
xn--qebd.com
yourdailycup.com

Other certificates including the domain name mindreadingapp.com

(limited to 100 certificates)
mindreadingapp.com

Certificate

The complete raw certificate details for mindreadingapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0PSiDE31Vcip9mm1LMP
zGCmUlBThN5wTJ+Yw0dkUPOJeiBWsAyg3mNcBneu+b7lDfctZjBUsSRFKoiKeFVp
4ALCRiQPMOy+oeATCbzySkStNocdhU7oTEx3TRWskt76N7qPLJHcvFkHPVQXLUDf
MGxrI7nettM3Xkv4Bb0wlBDf1BS3bdcAt8gUSwol1xGoYbXKXVoyxmb8ke++nwmr
4DCn2sBvLdSaAqt86Lb0H/EPws4Z8lE5b+UQFHjHjhR/pIN7L2zhzr+WLLem71Bf
FXJWgb+UKrrEYSxiXmC+d9K1HeLU8ro9GU/mm3DlE+GI3p9hjXcPqTA7mRLc1M4t
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312073322998394464791668610786738438974250
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 21:34:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 21:34:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mindreadingapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25659820375421397431233982579004561269452758908425815448105685474512729356137589502436131373148595682324593483948872156581712336399477213634835984507167202636616594942024753159292952754748268105082553369728289024935740619700373537328444829405256963832185998326007506235366130308090505534810565069195972671118940322098565404149260706073621224825158063500321501934265813526672028160501361585788029694620934476657448372799779141509185646243333626165842798511697278682164256911708160235759894152138580849455532176964848118722127196877050312238793827149055950875274047273120270946842064512986052997625658741433634822958419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5685de5e5428b73ff331603429a21d5d898cf668
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (614 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concert4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshledger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindreadingapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesotatreatmentfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymugsup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nantucketbuyerbroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noncompliantnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portotrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltlakeprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shstandingoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuyasmarthome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concert4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freshledger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindreadingapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minnesotatreatmentfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymugsup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nantucketbuyerbroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noncompliantnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portotrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltlakeprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shstandingoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuyasmarthome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--qebd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourdailycup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--qebd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourdailycup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f5a583dc30000040300463044022014a82cef45cf42fac00a7090cd764dc729449a42e512c0b3bf165bd3fe5b626402204824c55085ab72d41da0094d9cdfeb3761c8a4064bb3dc7e8e2e1e285917759700760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f5a583db200000403004730450221008ea8aecac9a4458901d867aa6143c5ca5425567659dba1cf39769f6693c7f53f022028dee952afeae955a399e8580380f73cb05438d156b07c99d4eed670a66d77ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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