femdom.org
Issued by R3
About this certificate
This digital certificate with serial number 03:8b:77:f3:f1:31:1f:c4:18:f5:97:5d:50:3d:f9:db:9c:e6 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=femdom.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:8b:77:f3:f1:31:1f:c4:18:f5:97:5d:50:3d:f9:db:9c:e6Serial Number (int): 308795551548878940859153840618245055028454
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ed:28:44:2b:3d:b9:be:8f:6b:8f:02:27:67:d9:5e:38:ca:b1:e6:f4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c1:6a:64:01:0e:f9:db:0c:57:7e:38:34:1c:85:a4:73:42:02:8a:54
Fingerprint (sha256): 91:5f:3c:f6:52:e3:a4:84:17:e8:45:fd:1f:b7:89:47:a5:08:01:75:b5:57:42:c4:66:66:c3:99:a3:0c:4e:1b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate femdom.org
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for femdom.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
buyjean.in
femdom.org
homewatertesting.com
xn--istanbulluolu-62b.com
femdom.org
homewatertesting.com
xn--istanbulluolu-62b.com
Other certificates including the domain name femdom.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for femdom.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISA4t38/ExH8QY9ZddUD3525zmMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMjcxMTU0MDJaFw0yNDA0MjYxMTU0MDFaMBUxEzARBgNVBAMT CmZlbWRvbS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Xg6+ w4V8/shhqWgmrC8tVYhrv368xfeffT1m3b24iSWW4NLx0oFSQRTcquvIUoHEzNWC BGxYBahXZxuv6OFmOQE9tj5FWDODAM9qv1p4vw4uwr0PURVEKbGEKgQjzV6MaZ2q Ga8s5rHqDQ1BIezx1cVuYPEPYNhqYvczXe2lZSozEE2uOuOOy47i5sE6GN2TGX8g 547bUyIsJ70uoNNjEpMFY7KmR2YPcL27+lER5F/V8YLN4sf+OJNHoHBNkv2HnbdD uJ+bZlf996vJfhHmCQbwaQmqMoW3T7vYBcNn1jYC+Q4qSca6pwjbSzBFqh7ZGYLH s0BshnbdKvntUrxpAgMBAAGjggJJMIICRTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FO0oRCs9ub6Pa48CJ2fZXjjKseb0MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMFIG A1UdEQRLMEmCCmJ1eWplYW4uaW6CCmZlbWRvbS5vcmeCFGhvbWV3YXRlcnRlc3Rp bmcuY29tghl4bi0taXN0YW5idWxsdW9sdS02MmIuY29tMBMGA1UdIAQMMAowCAYG Z4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcASLDja9qmRzQP5WoC+p0w 6xxSActW3SyB2bu/qznYhHMAAAGNSvvy8AAABAMASDBGAiEAhdH0xEh4J+WCG/NF W75j8741kwsHI67ABkSTwTnZxnwCIQDJICagxNwDV2fGYBjWKJZ9womPW8EE7Sr8 GlLK7b8asQB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjUr7 8ucAAAQDAEYwRAIgE7RZmTECZVwjsyAIgT3/mAW5OJFLp+V0qkQIGIKhnhMCIFgt SZB03Vm48JJbBCI890BDiWgn8q8NJyVvmvzurShWMA0GCSqGSIb3DQEBCwUAA4IB AQAd6vsTNI0DazbTCzEzrF56sMdksdD0kE+QBsUdoB7PXN44qs3rNCcF+5gtX94P Cd9dmJbPZJYmjazDti+DjJIsUloMVsiehwUphWfj2KBESfil2lrRelkeUJ/tslX7 afSnckvHarnaI2m3Duo9f0E7zLxDsM23KFE5iKwXZaaxps/peHp+GxwJHV3ylShj Ty67dUGeMqC8yfbSM5sRljpa/FljLich0lnXDeLk3GCMjXzYw8c5bla5ZTrjIIQk DgN8yf/1jysmK13Hr+VjhGSEWJGB4m4XEag8+B079+0O0CjgtOv55MqO5ezXKZwY mkXes0kW4mgOB9ptq3lKMpzZ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV4OvsOFfP7IYaloJqwv LVWIa79+vMX3n309Zt29uIklluDS8dKBUkEU3KrryFKBxMzVggRsWAWoV2cbr+jh ZjkBPbY+RVgzgwDPar9aeL8OLsK9D1EVRCmxhCoEI81ejGmdqhmvLOax6g0NQSHs 8dXFbmDxD2DYamL3M13tpWUqMxBNrjrjjsuO4ubBOhjdkxl/IOeO21MiLCe9LqDT YxKTBWOypkdmD3C9u/pREeRf1fGCzeLH/jiTR6BwTZL9h523Q7ifm2ZX/feryX4R 5gkG8GkJqjKFt0+72AXDZ9Y2AvkOKknGuqcI20swRaoe2RmCx7NAbIZ23Sr57VK8 aQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 308795551548878940859153840618245055028454 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 11:54:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 11:54:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'femdom.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23905421168981909736351587625836718375209295871223520306232103936290992311169718572781409739605335957007960660811593594538639357206827192196357118244687191890577924488348846586519029139923825563252468281846182993545100956595749259379868634811339969959406014245083639355046841183181908014927992466317145238545132784511706163797127419139635720770208047086733549945688613418145255859912628123715697701982584716171445251574337744750942850795140176923661670710454963178990237738006244982249795905046125982722246373384171144586844468611014406759228669396587840875975819941083049221668445523965015881405394940360442923629673 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ed28442b3db9be8f6b8f022767d95e38cab1e6f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyjean.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femdom.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homewatertesting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--istanbulluolu-62b.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d4afbf2f0000004030048304602210085d1f4c4487827e5821bf3455bbe63f3be35930b0723aec0064493c139d9c67c022100c92026a0c4dc035767c66018d628967dc2898f5bc104ed2afc1a52caedbf1ab10075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d4afbf2e70000040300463044022013b459993102655c23b32008813dff9805b938914ba7e574aa44081882a19e130220582d499074dd59b8f0925b04223cf74043896827f2af0d27256f9afceead2856 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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