name-jewelry.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ae:bb:b9:49:84:ca:1b:fe:5d:f1:e3:c9:4b:5a:5c:65:bd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=name-jewelry.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:bb:b9:49:84:ca:1b:fe:5d:f1:e3:c9:4b:5a:5c:65:bd
Serial Number (int): 320795517340791209126493108916239455774141
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3d:b8:58:94:60:dd:1a:df:dc:72:d7:45:60:58:59:9c:cd:9a:03:67
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 44:0a:01:33:28:fe:06:53:12:4f:40:47:30:b1:f3:6c:64:ef:b8:dc
Fingerprint (sha256): 8c:b8:7a:3b:42:06:a5:7a:fb:88:01:d6:37:db:f4:e6:d0:d0:60:11:63:9e:fb:be:07:84:aa:29:df:60:e8:a4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate name-jewelry.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for name-jewelry.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

name-jewelry.com

Other certificates including the domain name name-jewelry.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for name-jewelry.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320795517340791209126493108916239455774141
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 10:38:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 10:38:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'name-jewelry.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839850848712661331676914613240102299588431833265258144022701036315853678875979549030810432696141826392896182300217385439283819505843433151301256532263507243939497142626895387902322795389397634186701207455224730204216827470282828103517403349420761816387525171938780391992001403156452376030882592747006509007355264593543234094680926224611521864989573257658949806767325113554988984406286443997974152178659212311193543289708171115804592446388220908313914047443995971556050362217423595313328081476775002409920890113160265211268700166328372236864671133645129975728353516547481362472753072512490966672415707370011909906104116000843117194146367013010389810661350124369131926130562361613946351894993963421819783218985812609359257549710686054451176869837366222957811817654882155004010512342066611177933480328084021012456256740597825730749282955812917357808006566610877819363063789006094457864751512807966134623131008043255850743529071763226852073309232525866764169931988753068888272582780705460826607391238557150349115852475195321710514949931668910126472070052431623895360219406376404666410195686789317437734337269309444945289675950027785923008235839387986061392279126034305311361003901316083808142698153526125518577508546724965612939050248991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3db8589460dd1adfdc72d7456058599ccd9a0367
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'name-jewelry.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab7886ef30000040300473045022058e854745a29f4a7fd337cba6ce1d54f470c6945f7149645399a88627794d1f10221008323b8d38348d2ee207a0902a6c45645cde13252f849b0652b8de261b14ac2ed007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ab7886eee000004030047304502201a21c7b8914ad3cd9dae371f69d5a5427b8e1df2d1b146a145aad12f9356b7c5022100b79a08d22446cbd4fe1fbd53ff17ff865a21fb72e2fa870665a833335b87cd5d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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