www.hoveringhealer.com

Issued by R3

About this certificate

This digital certificate with serial number 03:9d:7a:10:57:30:8d:2d:45:cc:60:04:4a:17:a4:7c:34:bc was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.hoveringhealer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:9d:7a:10:57:30:8d:2d:45:cc:60:04:4a:17:a4:7c:34:bc
Serial Number (int): 314923440062519854433397882070020313068732
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:6c:dc:fe:6d:42:16:07:00:db:c1:24:bb:1c:ac:b7:2e:0e:ee:a4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b6:01:b3:41:6b:63:cb:e6:c7:44:67:aa:b4:97:a3:60:15:ba:b2:92
Fingerprint (sha256): 8b:41:49:88:53:ff:02:d0:ea:0d:c8:8a:42:ed:e2:0b:6f:48:8b:91:0e:7a:ee:9a:28:13:c9:54:f6:6c:79:57

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.hoveringhealer.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hoveringhealer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

68656c6c6f776f726c64.com
dentistsbismarck.com
duluthsportsdoctor.com
hoveringhealer.com
mainefinancialadvisor.com
minuitbutterflies.com
myvwmechanics.com
northdakotastemcelldoctor.com
plumbingcompanydenver.com
scotslairds.com
serverhostname.com
spinmonster.com
sportsmedicinearkansas.com
stemcellsrochester.com
www.68656c6c6f776f726c64.com
www.dentistsbismarck.com
www.duluthsportsdoctor.com
www.hoveringhealer.com
www.mainefinancialadvisor.com
www.minuitbutterflies.com
www.myvwmechanics.com
www.northdakotastemcelldoctor.com
www.plumbingcompanydenver.com
www.scotslairds.com
www.serverhostname.com
www.spinmonster.com
www.sportsmedicinearkansas.com
www.stemcellsrochester.com
www.xn--4dbej1as.com
xn--4dbej1as.com

Other certificates including the domain name hoveringhealer.com

(limited to 100 certificates)
fvfpartners.com
www.hoveringhealer.com

Certificate

The complete raw certificate details for www.hoveringhealer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFvPW8yhnr1ghZEZ0GbO
/a00t1SVGiXNZ5XTmpKrYQcOGrB0g0/9Uw0ISY9WCAZ2GroE+8oDx6b2NvzZlpup
S0JzKdGg3axb/qL2YyrQPV0zoFpDvNfhZgh7eBRcwErby9doGLaRTznzqUry0AKL
C8QjeyLRF4RA6LSN1YM671kEYdvsX/9J6VeUJRV6CVOircbylEQw0mqV2iJz5wsd
xL1/Yj1e8LsKD9Q7AYSwvEyiUEC39N5Eshi8EFbM6cktTDicFmf7YbojMWrj+KgE
KWOedO+P7monmiJ//VYo389iOFYBsAUH246LtFSDVFduBEPxKyh7fzNPh/xqxwr0
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314923440062519854433397882070020313068732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 11:56:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-13 11:56:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hoveringhealer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23778074529260493530885990946541122620819732379436239705501125941514129626069090472802629325823512620629434946796645464176347602329881175365434246616422033900328720815654658808611938496551648667188295171395590788959617002648076442053606131146116536337970961300969353119344153204761119505026634077463553525066847203958363276080631222842475234673501580949227244973184107476899365796776543494823037379039658465845735001946506479757036283620047042383828845466457306928106642983675000383595221059945587925332003816333685853500467310206657922176392615727130269960848097814011621876481053344401470268318629665259996649813093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f6cdcfe6d42160700dbc124bb1cacb72e0eeea4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (750 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '68656c6c6f776f726c64.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentistsbismarck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duluthsportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoveringhealer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainefinancialadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minuitbutterflies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myvwmechanics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northdakotastemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plumbingcompanydenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotslairds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serverhostname.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spinmonster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinearkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellsrochester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.68656c6c6f776f726c64.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentistsbismarck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duluthsportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoveringhealer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainefinancialadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minuitbutterflies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myvwmechanics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northdakotastemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plumbingcompanydenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scotslairds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serverhostname.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spinmonster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinearkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellsrochester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--4dbej1as.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--4dbej1as.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f7c5394e60000040300473045022040dd29eb1d23c87f0a03a8aa22c7fc9349d0d0a2bb336222840950593731b1d8022100bb9c68eed1a1da5ffd16a80d7560f06fecab003f24d74a5083a9559f3a54fd2100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f7c5394bd00000403004830460221009b8c0807b5e479f5135edd8dbc7951cbe94239a5f26b6769d5cc74348d26fff4022100f934b3922b447f82c2c7024b793b97b73d7bf599ccd17b2e015eec0f5b5bd76b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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