theapario.blog

Issued by R3

About this certificate

This digital certificate with serial number 04:b2:b0:08:a3:69:50:0c:66:24:58:c3:9b:6c:1c:99:db:2e was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=theapario.blog

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:b2:b0:08:a3:69:50:0c:66:24:58:c3:9b:6c:1c:99:db:2e
Serial Number (int): 409253394018977542804695814117479308450606
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 93:d0:e6:de:a7:80:bc:04:fa:b8:71:9e:c4:ae:51:57:d2:44:56:c0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4a:ba:9e:41:93:10:6b:8b:26:64:b5:c5:dc:77:4b:a4:94:2d:a6:6c
Fingerprint (sha256): 86:75:67:64:fb:ce:eb:41:67:81:dd:9a:a9:68:d9:c0:1a:5f:bf:34:94:71:ec:eb:dd:21:1a:b0:2c:2d:8e:e1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate theapario.blog

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for theapario.blog

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aiandries.com
ammosquared.org
cameronnewton.com
commonlawdivorce.com
customdesigninteriors.com
getridofbamboo.net
homeschoolnfts.com
hrclinic.com
indirapuramdentist.in
koochiching.com
lizleedesign.com
loansondomains.com
magasota2020.com
mercatoimmobili.com
movedandsecond.com
nog.co.in
openhomedaily.com
openyourgov.org
pan.bet
percussionexcerpts.com
pulpfan.com
shorttermlimiteddurationinsurance.com
spank.bdsmsecurity.com
spectrumnez.co.uk
theapario.blog
unndan.com
usaprecision-firearms.com
walthallcounty.com
www.certifiednaturalgas.com
www.oilseedprocessors.com

Other certificates including the domain name theapario.blog

(limited to 100 certificates)
theapario.blog
rivercruise.life
dotor-ohne-rezept.de
weconsignguns.com.theapario.blog
charlottehomedesign.com.theapario.blog
wisesolutions.life
mechanicforhire.ca
landbug.club
theapario.blog
p-c.co.za
theapario.blog
theapario.blog
mmm.vc

Certificate

The complete raw certificate details for theapario.blog in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv43VcBKHi3Uuq1jHXhq
LLl9BkyYsXc4h5MM+G6PPiFpAkZHcChZGOGEwrmwuUPkjTAMJJe5x3KTfSod4bOr
ZbT0/SoE+c4uUXo69dg2Afj2NZgsOuxV0ZIeb40OtPepm2T0qYPUsnbpr0hLSqmb
9DUPzQsYX9GlrvABS+kuCwlqqLnnqY+JYiHhTO7cBYNbH+7PSrwfCwaX/t9FWFa1
0qwu8XTqxKQudrniK5xoKUsC/0Q+kEWZ8jVb2pNHDw2gB43N8JFK5GRwNt5g9jd9
Lkc8Rjug6Rg1pCFvZpiWA9O40y2kMzARCStZZT3Lnj0TVIZ+443Iq/DJMVJD1S0O
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409253394018977542804695814117479308450606
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 21:29:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 21:29:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'theapario.blog'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23100730160657764479245010950021569359308680543068732385693827612648439285489394067729149612673072520677264857346742285581684563882096987098267406449861407278396809026398610074566086909236708057949772165669844250028454500677274207419107881416673798602756306276686741545621147327040430086654327563384127173651470822053495617049040443367486920069849781826008558312295665705429695072887201540238354552549013945209573682078483048331784255175655137213898683898930554768528024126535596662944070353344992191085994096019418669980754517857515309326701167174447516153121632203296741446283272598206956246308378527086943163715151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93d0e6dea780bc04fab8719ec4ae5157d24456c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiandries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ammosquared.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameronnewton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commonlawdivorce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customdesigninteriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getridofbamboo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolnfts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indirapuramdentist.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koochiching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lizleedesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loansondomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magasota2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercatoimmobili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movedandsecond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nog.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomedaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openyourgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pan.bet'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'percussionexcerpts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulpfan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shorttermlimiteddurationinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spank.bdsmsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrumnez.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theapario.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unndan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaprecision-firearms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walthallcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.certifiednaturalgas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oilseedprocessors.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f5a5389e2000004030046304402202064b8bc885927101bbdefe73d5525c6852b95f086dac02462a67c0a6ea55bc402200b32ea48d944245f0b265af17fdb5100236ac9c3944a545b9457710a14de6e0400760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f5a538a5100000403004730450221008ca8323118f15ee34cfd457243777f97e006a397196737bb0cbf6adb68e9ff6302207f7ed2b5ee577f4f154120682184b9d62d612c4d7a64f72504bceda5b3dfa073
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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