marquee.lighting

Issued by R3

About this certificate

This digital certificate with serial number 03:16:ad:0d:bb:c5:6b:b9:cb:d7:d4:0d:e1:f5:d2:9c:d9:c9 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=marquee.lighting

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:16:ad:0d:bb:c5:6b:b9:cb:d7:d4:0d:e1:f5:d2:9c:d9:c9
Serial Number (int): 269053097619123220942959151917734874110409
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6f:36:e7:62:18:d4:73:c0:32:2e:a2:ef:4e:d5:ae:72:71:0e:ce:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 79:24:a3:ed:59:5a:a6:1d:0c:92:32:5d:af:4b:24:53:c5:66:e4:76
Fingerprint (sha256): 84:b8:22:d0:2c:86:86:de:1a:e6:e7:6b:13:e1:24:4c:ee:ad:fc:ee:2b:58:c1:03:13:d3:7b:f5:8b:14:03:af

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate marquee.lighting

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marquee.lighting

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arbitrageanything.com
beachchoppers.com
facbo.com
handymanportsmouth.com
marquee.lighting
metabarnes.com
namefoster.com
neverstopinnovating.net
nocera.pro
obamacarebyzipcode.com
processarbitrage.com
rashika.in
saintlouishighschools.com
saseniorsdirectory.com
saseniorsguide.com
traveltechplatform.com
trueamericanmediallc.net
youraudi.com

Other certificates including the domain name marquee.lighting

(limited to 100 certificates)
trailerskirts.ca
marquee.lighting
balmorallaw.ca
localbitcoins.ae
sunsetlibrary.bible
balmorallaw.ca
balmorallaw.ca
lng.world
balmorallaw.ca
heavymeta.bible
godaddy.tube
trailerskirts.ca
omeiapad.ch.omeiapad.life
annoncesrencontre.be
sunsetlibrary.bible
marquee.lighting
enerpactoolsgroup.asia
www.ateliernovako.ca
marquee.lighting
marquee.lighting
marquee.lighting
kak.me
proassislife.ec
trailerskirts.ca
sunsetlibrary.bible
marquee.lighting
trailerskirts.ca
godaddy.tube
balmorallaw.ca
sunsetlibrary.bible
whistler.lease
powerbilt.club
powerbilt.club
godaddy.tube
heavymeta.bible
marquee.lighting
marquee.lighting
www.cbbt.bible
marquee.lighting
trailerskirts.ca
godaddy.tube

Certificate

The complete raw certificate details for marquee.lighting in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHWCXg/mes5yAN+33UFE
++zbigsXgpyzqA73hSaAnyeaV+68/+h8JYvuIxWRBYaIT45AnacdDvhMNOykPr5b
XOEOHlPLjQuHj4oD/bxIM4XwgXZrYyLIW37Y1Wj0PuFPZDtfmryKXz5IVrmXXS3i
Ia7pHwQIUjemk7eRiYUWJqGqqXP+Q5b1Nn7abX88lCSt34sTk9QyPWQxRn6vnnDp
LK+1Hz+DF69He+mEaoJ8HDJQs3w2tFPWPPMWkNjmothCmAHeIpTteBz7coB/mFqt
PltaTSjy6PEPOR9gD+iyIlcKjVvFrBa6EPgV21TaBNE0g+ULfLASizThofqpm4Ae
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269053097619123220942959151917734874110409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 02:03:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-18 02:03:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marquee.lighting'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24800653743100670724727225549156547600166358534128531051901291886441779224476308477973368163176089839443463955132034615740550181002009652910546854389021222072961545682721117229494847811717258001322699765182651318262787483701507219060943678456177487087373612215565822206799648128311683348600755976045214742555150242282701021648186698501752509368270572254821260220199647805752343356587655193781778251075710836330712931731734524209872757254955654252208644464219893400716918365804510418157448766548485707304455930736104295257405886593447119605825587831255364550287059691028785498038129391677589156177987884150779908464161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f36e76218d473c0322ea2ef4ed5ae72710ece48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageanything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachchoppers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handymanportsmouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marquee.lighting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabarnes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namefoster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neverstopinnovating.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nocera.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obamacarebyzipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'processarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rashika.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintlouishighschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saseniorsdirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saseniorsguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traveltechplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trueamericanmediallc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youraudi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ef44f37b400000403004730450221008f1b3a79d2b2dd68947744dcf6fd07dc7dc484491cd0202bd0baed1bedf7daf90220427af0aa4c69179c8aa39f40460479e50c70a6230ee628358200f04c95ab081e0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ef44f37b20000040300473045022100c170fb0083b0ef5535f10944cf9b119376ade74ed9fa4db1cbacc303e07f40640220072459a18647909eb845afeece45329ad847cb6e1323dc4281f4b708cdd88f6b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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