light.thebo.ng

Issued by R3

About this certificate

This digital certificate with serial number 04:06:00:b6:93:b2:79:ae:9f:8b:8d:75:f9:9b:12:a2:9c:e5 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=light.thebo.ng

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:06:00:b6:93:b2:79:ae:9f:8b:8d:75:f9:9b:12:a2:9c:e5
Serial Number (int): 350491785922249354162950399846037302975717
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 59:59:3b:6a:f3:e5:5e:ae:4e:bb:61:51:57:68:4c:8f:53:8b:d5:1b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:7e:da:20:c0:96:6d:e6:a7:0f:82:40:15:d0:86:4a:cf:f8:5f:fb
Fingerprint (sha256): 84:bc:73:36:11:42:da:70:c6:ee:a9:09:15:99:88:3b:de:65:7b:c2:b4:83:73:4c:4c:cb:f4:23:17:4f:9a:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate light.thebo.ng

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for light.thebo.ng

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anaayat.in
bettiesbench.com.bestjacksonvillesolar.com
centerforquantummedicine.com
charlottemuslim.com
credible.xyz.mycontainerhome.com
genivir.com.travelmagazine.in
growora.com.trailerskirtings.com
light.thebo.ng
newkoreas.com
pharmacyresearch.com
rangers-of-mearcholt.com
schumannfrequency.com
sportsindustryattorney.com
themunds.com
throckmortoncounty.com

Other certificates including the domain name thebo.ng

(limited to 100 certificates)
light.thebo.ng
light.thebo.ng
ccc.thebo.ng
www.mpgsc.org
qurated.vc
marketclub.asia
silverio.thebo.ng
sellout.hacker.rehab
arbitrage.exchange
sanm.co.za
light.thebo.ng
ccc.thebo.ng
silverio.thebo.ng
businesscredit.ninja
qdd.co.za
markedup.bible
tv4.co.za
preview.vc
silverio.thebo.ng
silverio.thebo.ng
silverio.thebo.ng
ssl-rctc9.epik.to
silverio.thebo.ng
light.thebo.ng
ypp.co.za
davidofski.org
ccc.thebo.ng

Certificate

The complete raw certificate details for light.thebo.ng in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVkvddf96UHnl+p5agNr
hDJrMa19YuJ65zkynWwM1eHB8/xyCFxLza2DRMt17RpzDfuTLgelySoEeyuz/4jr
y91XdKeI/tqFgVMEQH9/B4dopkcx3kKpCZtSoGPFZmn5Riic+yvUN5UxbyeNqO+p
wgMBXQ4QswWunK/+FBQemZ/Mi8yhaJEQVhTYrDMp0PBC5yCj8RlWjFCwiO4A3nNC
ivTVflEA/ALaZQpqe+LXz7Q3KKia0s5s9CwlCS06M5Sj7DnkUqFrFqo3+dlqJC2G
Sg0nfsy0wB776Ie/OcQizeN1XLx6LX/VOptFy+eP8Q6WDTZzrsBQaDUvJnc+Rbd/
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350491785922249354162950399846037302975717
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 07:03:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 07:03:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'light.thebo.ng'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25417878254043007010628811468327110530192677503337350954139201795885858496772452881228933616386537900767696424552755416724654542040058083706238106946391424110504431258273546790176542572788756036229743506741767535967393253817310144621349413364729743824020704385057512475803920531479454003039495103021632897783908084866330515515539726550935965471762118285783447150978428359788948641080758174341562226360851959910510144771208286935688237014735504412545082014270299599960810282965313792688916128207802905251059355128985869424435397014013399105713509198254668247947899246308221365607190839226748305535130374058777056345977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59593b6af3e55eae4ebb615157684c8f538bd51b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (378 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anaayat.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettiesbench.com.bestjacksonvillesolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerforquantummedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottemuslim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credible.xyz.mycontainerhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genivir.com.travelmagazine.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growora.com.trailerskirtings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'light.thebo.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newkoreas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacyresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangers-of-mearcholt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schumannfrequency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsindustryattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'throckmortoncounty.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c76ccd0d5000004030046304402200bfff13820d85e92794374eba045a0e5e44f62c3220f74d7971990128e5fddc402205cd602bcc49c7d70bd71e3372fe4ef38039743693ce4403a2a9c69a316cc6db3007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c76ccd0c90000040300473045022100ef913321ef3d7e7fd434f76a11d6df75d15db1b067ae171f75489cf65caf51d4022031e6cb9a5591182df17f820c4377d764924fc557e770a490e2b0e584f68e7a29
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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