www.civilization11.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9f:b3:8e:15:5c:49:41:9e:7d:fd:b2:97:ed:5c:61:b6:d7 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.civilization11.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9f:b3:8e:15:5c:49:41:9e:7d:fd:b2:97:ed:5c:61:b6:d7
Serial Number (int): 402792709618111878526295852631963111372503
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 23:4c:b2:1c:18:96:87:6b:1d:64:ef:80:c5:01:79:f4:81:26:5a:00
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fd:8d:f3:9d:6b:bd:f6:52:af:6b:bd:18:6b:f0:53:d9:3c:3a:f2:c5
Fingerprint (sha256): 99:28:b3:26:1d:e2:c7:e0:f4:4a:a7:ca:ca:3b:db:5f:e3:b5:e2:92:2c:09:9e:ca:3e:0e:53:2c:47:fa:1b:bc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.civilization11.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.civilization11.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1pennsylvania.com
a416eab848ff7a416eab848ff7a416eab848ff7a42.com
civilization11.com
cme.international
devs.social
foldingstairs.org
homeandgardenidea.com
plants.cloud
redapplefireworks.global
roageorgia.com
turingtuning.ai
unsafeamerica.com
walkto.ai
webuyguns.org
www.1pennsylvania.com
www.a416eab848ff7a416eab848ff7a416eab848ff7a42.com
www.civilization11.com
www.cme.international
www.devs.social
www.foldingstairs.org
www.homeandgardenidea.com
www.plants.cloud
www.redapplefireworks.global
www.roageorgia.com
www.turingtuning.ai
www.unsafeamerica.com
www.walkto.ai
www.webuyguns.org
www.xn--7dblo5a.com
xn--7dblo5a.com

Other certificates including the domain name civilization11.com

(limited to 100 certificates)
www.civilization11.com

Certificate

The complete raw certificate details for www.civilization11.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fH5FvTopz1ikGZwLOtn
mI0AsLS/80HPhedAvShXCBrH2LtL50HUPQmZAYy6ZfNFBUGh+fNEumNtfx01R4rC
bdsrVlA8zLtxIydCzxdSFFGZUDc/Q2hVgbRl4YAF4UrDO7i1PB9YSLdPtUatxZs9
4G4bIglWldEOVN4dMtye7CLNNq5gbYJ4w9ppcrN0N46TCgrQhecLiVFku809r/Xh
mP7Xq1ddOo0/4UylbNycCw47bqrQBYte637TuO8CavJ8k9KNoYPi6cgNen6Mrwmx
I7Rk2lbtcmrGr3dcqhvDJtfs4dtyPepafrYhc51FA5POTYX4r74NPsJMaPZm7q19
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402792709618111878526295852631963111372503
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 17:23:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-05 17:23:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.civilization11.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28017986734191473572546717746651545203777913837550191734999382763723208766483934803863437104901859290760064257095262863140870364961096477338087836518103195842418051131822213594661970956189000645139872065944749635841392761934463520117614795796611861807235679640790973539336575784744774903650867667276450760309487634319387632808479150719827722405337222825149413209166151078939074304131366164428454857671831547996109871043694367262260012810019819970894355544640250406019530598079801072259525304105448433048138810275874038265452732215750822293746692661243209118843648767165022552231518235316264391709893651504350660230419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							234cb21c1896876b1d64ef80c50179f481265a00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (656 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1pennsylvania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a416eab848ff7a416eab848ff7a416eab848ff7a42.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilization11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cme.international'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devs.social'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foldingstairs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeandgardenidea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plants.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redapplefireworks.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roageorgia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turingtuning.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unsafeamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walkto.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webuyguns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1pennsylvania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a416eab848ff7a416eab848ff7a416eab848ff7a42.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilization11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cme.international'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devs.social'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foldingstairs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeandgardenidea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plants.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redapplefireworks.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roageorgia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turingtuning.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unsafeamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walkto.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webuyguns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--7dblo5a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--7dblo5a.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f544b76db000004030047304502207dd910b2c5750e8dd4bb46106d2fbf0b9efaf6cf322dac9389324812f0035d57022100acf1639950679c7f6ff3068c4985e9b0d7b80b93a3d43b40549fb341d128aaac00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f544b77120000040300473045022037c0e7468a8e733e8d7d5df76f9b471ffcda163ab030f97c48779a4305bf2a00022100bdb74d48c564c7cb8b26ce19f46ad10d0da53116b4216314b9679d56ae126698
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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