vacationrepair.net
Issued by R3
About this certificate
This digital certificate with serial number 04:1d:98:67:46:b1:b8:83:73:89:4a:e7:5f:68:2d:48:c1:f7 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=vacationrepair.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:1d:98:67:46:b1:b8:83:73:89:4a:e7:5f:68:2d:48:c1:f7Serial Number (int): 358519911263533099504196540235055440118263
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 29:78:6e:00:a0:89:ec:43:de:ed:9f:47:b5:a5:26:4b:1c:09:c9:9d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): dc:55:94:14:25:ec:13:e4:2a:f5:c2:21:81:f5:cf:04:7b:31:fe:c6
Fingerprint (sha256): 96:d3:df:5b:cf:9e:fd:4f:82:23:66:7c:12:a1:f7:64:ab:9c:3c:e5:d1:a1:eb:91:cc:bb:81:74:66:d6:35:1d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate vacationrepair.net
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vacationrepair.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vacationrepair.net
webmail.vacationrepair.net
www.vacationrepair.net
webmail.vacationrepair.net
www.vacationrepair.net
Other certificates including the domain name vacationrepair.net
(limited to 100 certificates)
Certificate
The complete raw certificate details for vacationrepair.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISBB2YZ0axuINziUrnX2gtSMH3MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MTcxMzIwMjNaFw0yMzEyMTYxMzIwMjJaMB0xGzAZBgNVBAMT EnZhY2F0aW9ucmVwYWlyLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxtSUYMdVJX5DO0hA2chv+qSfec5JigPszd9aFsKBOoHyRJNDHnWAEjAksE 3ZEAw0/7XTqAB58RWH6Ogwb3tKKKZAaG3YOpkMEmnTpROYT/5ofXJN1k5+sBsBmN mgJDkU3Hjh5TBaHWGwXszxAAlm1bDA2wKv2Ou7lCIouJHZwhddv/3upsTz3XYKcy sldxmA5awjn3y4N9glWTnBYIHaOhH3wAvcOuHz5rKcaChqZjPP/VqqsYhPtFQ6Sp MFa6En3DHKvXFxC2fmxTobUgyweQY2+xu0cHUHmcfYCDikfm7y/VeZG4IwGyPJrt wmQKoKH+GNhtDcbo7qGrioHaOgcCAwEAAaOCAkkwggJFMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUKXhuAKCJ7EPe7Z9HtaUmSxwJyZ0wHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wUQYDVR0RBEowSIISdmFjYXRpb25yZXBhaXIubmV0ghp3ZWJtYWlsLnZh Y2F0aW9ucmVwYWlyLm5ldIIWd3d3LnZhY2F0aW9ucmVwYWlyLm5ldDATBgNVHSAE DDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AHoyjFTYty22 IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiqODlGwAAAQDAEcwRQIhAIqImjAP +O7GS67VRBQcx63hlTmH+2/tsRPoMspLXm5wAiA//l/XUHiS/mj3XaS45y5LCk2X gaBScykN0laWpXvC0wB3AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKK AAABiqODlJYAAAQDAEgwRgIhAKVI58tuCG3QuZDyI2U2d1eF+mGe82FSgphw0A5u 8hZEAiEA/QfeOX6MmrIenQDwal35yiTL0Q2u3IVHwqehn9mmc5IwDQYJKoZIhvcN AQELBQADggEBAFSEooj4A9a/ZZ8rDE/e1XSKQVUcnFxKF14MsQUK4beDFGM/c9k9 NVXdQjxEmLfEVjuNSG/o9obJ65TmvrOasyRr9arn7BGTQlAgl0c6zQf6JUDg/ASD QB23bYHbM+VYtwML/3+Ue7ErSSVyOeLD+hWR/IkthGEgYgZCXLvexYc6MILkWLtW GyhLv71z/dxr6W+9O+bF6SOem25EbtVDcnpFUvsawxV4uQ0ozpJfKTQOPrCjgo3K 9xTY4kcuNss8OxXita3PIBJJFP5T/je2RuoASaZlwvUmXIrIvhanULyJTELfVdXl fVpCbuNFutF5mD8yJ7RnOkPE4g5Md5ueUyA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG1JRgx1UlfkM7SEDZyG /6pJ95zkmKA+zN31oWwoE6gfJEk0MedYASMCSwTdkQDDT/tdOoAHnxFYfo6DBve0 oopkBobdg6mQwSadOlE5hP/mh9ck3WTn6wGwGY2aAkORTceOHlMFodYbBezPEACW bVsMDbAq/Y67uUIii4kdnCF12//e6mxPPddgpzKyV3GYDlrCOffLg32CVZOcFggd o6EffAC9w64fPmspxoKGpmM8/9WqqxiE+0VDpKkwVroSfcMcq9cXELZ+bFOhtSDL B5Bjb7G7RwdQeZx9gIOKR+bvL9V5kbgjAbI8mu3CZAqgof4Y2G0NxujuoauKgdo6 BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 358519911263533099504196540235055440118263 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 13:20:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 13:20:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vacationrepair.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23786692379766476339777985542113209189703231058860989163477388951100091257364753492189637394626258821449588051268130291628891160857553131072918135344182354011426204296091694251058554683877689783246224048855932032378825213579974062071396565901565466718224758228570783251230784553320166981513128095036295548981864164967908934327078178585584082195314269955855372634611945226110560829837547278243482924301855643629366101615039240877106371063259752608756062043909576710468034003502267417605627948504525289773026217108931774359934679433222669318797911806180305720422873294819511293113902636484746519459592200835122293520903 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 29786e00a089ec43deed9f47b5a5264b1c09c99d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacationrepair.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.vacationrepair.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vacationrepair.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa383946c00000403004730450221008a889a300ff8eec64baed544141cc7ade1953987fb6fedb113e832ca4b5e6e7002203ffe5fd7507892fe68f75da4b8e72e4b0a4d9781a05273290dd25696a57bc2d3007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aa38394960000040300483046022100a548e7cb6e086dd0b990f2236536775785fa619ef36152829870d00e6ef21644022100fd07de397e8c9ab21e9d00f06a5df9ca24cbd10daedc8547c2a7a19fd9a67392 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005484a288f803d6bf659f2b0c4fded5748a41551c9c5c4a175e0cb1050ae1b78314633f73d93d3555dd423c4498b7c4563b8d486fe8f686c9eb94e6beb39ab3246bf5aae7ec119342502097473acd07fa2540e0fc0483401db76d81db33e558b7030bff7f947bb12b49257239e2c3fa1591fc892d8461206206425cbbdec5873a3082e458bb561b284bbfbd73fddc6be96fbd3be6c5e9239e9b6e446ed543727a4552fb1ac31578b90d28ce925f29340e3eb0a3828dcaf714d8e2472e36cb3c3b15e2b5adcf20124914fe53fe37b646ea0049a665c2f5265c8ac8be16a750bc894c42df55d5e57d5a426ee345bad179983f3227b4673a43c4e20e4c779b9e5320