www.ledger-tv.com

Issued by R3

About this certificate

This digital certificate with serial number 03:bf:43:b2:94:c6:a0:fb:56:d1:22:ef:02:22:c4:49:03:6f was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ledger-tv.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bf:43:b2:94:c6:a0:fb:56:d1:22:ef:02:22:c4:49:03:6f
Serial Number (int): 326420775399272013994383786370344661091183
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 93:cc:e0:5f:30:1c:bc:52:5b:00:23:29:d3:3a:88:83:44:2f:3e:5c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:1d:d0:b9:bb:73:40:18:36:09:aa:0c:33:34:64:cb:e9:11:f0:84
Fingerprint (sha256): 8e:72:f3:03:8d:6d:b4:88:62:bc:02:c2:a4:66:ee:7f:06:cb:bc:45:6b:a2:7f:4e:bc:d3:e6:72:e6:83:bd:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.ledger-tv.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ledger-tv.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alpha-ink.com
blockblock.com
britishbasics.com
dotqwv.com
emergencyplumberdetroit.com
georgiastemcellclinics.com
homonymphs.com
huggerpillow.com
ledger-tv.com
regen-tv.com
stpaulsportsdoctors.com
urfa63tv.com
viewdot.com
volkerbeck.com
vrinsticts.com
www.alpha-ink.com
www.blockblock.com
www.britishbasics.com
www.dotqwv.com
www.emergencyplumberdetroit.com
www.georgiastemcellclinics.com
www.homonymphs.com
www.huggerpillow.com
www.ledger-tv.com
www.regen-tv.com
www.stpaulsportsdoctors.com
www.urfa63tv.com
www.viewdot.com
www.volkerbeck.com
www.vrinsticts.com

Other certificates including the domain name ledger-tv.com

(limited to 100 certificates)
www.ledger-tv.com
gamblingdragons.com

Certificate

The complete raw certificate details for www.ledger-tv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteqwutB4NKjzKH7Ctpbf
/OpC6PE+fchne4sBVA+o6em1F+1AAC+t3J1/sZ0ZauJuVHcuK4gsYd0n38gVsMB/
Wo4CCxGe36JcIKtSWRN/7Bb4aVVJ/DTIteJ9A3Th9s2wk12nsakwQlCGYlDRokk8
xRZZHGzmw/N0c1GXkJVYBarPD8ZSjijlVGky1wp/lNH6qbve9V5ffUiusyLSq4+l
IQukI3Ce/smi7JmV64D4iY1LRLw0BeH1cI29ZAfiTx0XJJSuqVsCPugU/Nm3jlKp
YZbFzHsnhMuDMQu9K8TVjud3M5VpPNzOX7NNN3CuCihQ5PcDyluO4B88gAi/FCc4
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326420775399272013994383786370344661091183
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 22:05:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 22:05:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ledger-tv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22964863324038837363823846907026376448590923205966872416655108839416799241749634210469783203110455112312888240841988576910895114890387134781311345678305300659057689509468209232137736740974906605558230405223126864176135768571115083916838321441139131412217876812283635225027009525306262022930625603537008052495837913133199354024266485235662452190639959446350027490181262931713408831317106487537570524236933689009511435348344387229055585444674380999690196199270467823390968975326119881832442101704864941780840357100793532354371267249058271982086151878044729062274137279120746308476952093943657140007704188392531909097641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93cce05f301cbc525b002329d33a8883442f3e5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (596 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha-ink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockblock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'britishbasics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotqwv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergencyplumberdetroit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiastemcellclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homonymphs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huggerpillow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledger-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regen-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulsportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urfa63tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewdot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volkerbeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrinsticts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alpha-ink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockblock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.britishbasics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotqwv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emergencyplumberdetroit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.georgiastemcellclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homonymphs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huggerpillow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ledger-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regen-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulsportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urfa63tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viewdot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volkerbeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vrinsticts.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189518051ae00000403004730450221009d07e2c2b31165461391e838e6e855d8c160db85fa117b10882e0f6d0fa9263b0220483ea5628895d6eaeddf101891a2fde433c5953af0c119c68d2cd0798a3c97b60075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189518051cc000004030046304402206a76fc87be097d1bd0e77565dda177bd6e94dbf11bb87743cc1972fb81b8186302200ed252082a7e815cc05882413d28f19878b6ad33712416ee7da082c51401046b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0001d68bda7b8fe4c015916ceef389746465e369aabe3dbe734d954d7f4b2b9390246fbceb6a76607bfb748cc546922e50f90f2e771cf4d4d77a0ba96148b1ed0f7b37f687c2437178f6bf54bbc22e3ec1746a4027d35afb00f370c0e0e977369705047dad57bff7db8a7a47268d21dd046cb92278837fac6cbc0e06d2b56becdd66fc10ecb21e518bd4c24d46737556e0408c4984f7ced4647274ffd41e755560f76913b5b61bf4cf9c220fcdb29a3be249d68a77f71d231b646e031ab439b76b9fb5d0e1086ada3b248ed607f00820b0bc3d5180f376cced1f0f4b024d3952eb21f501741380bfccc62a71d22a05152f9c1b728ee4a17d48f2b50673618b9e28