standingonherown.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a3:66:6d:a1:3f:d3:0f:e6:fa:81:89:b1:ed:4c:86:fe:6e was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=standingonherown.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:a3:66:6d:a1:3f:d3:0f:e6:fa:81:89:b1:ed:4c:86:fe:6e
Serial Number (int): 316939034089845992187691958481845198716526
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:ea:14:13:af:a2:b4:93:e3:5b:69:eb:92:10:c5:6c:78:9a:3e:31
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c3:ba:cf:7d:fe:a6:31:aa:10:0d:b6:e1:3c:d9:92:c3:7e:0d:51:24
Fingerprint (sha256): 9b:4d:3a:0d:67:0f:8d:a1:05:6a:7f:fc:cd:87:58:df:38:d7:62:bc:3b:10:21:ae:e4:a7:9e:12:68:53:4f:44

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate standingonherown.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for standingonherown.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allproconstructionco.com
catboykamipremium.com
fullmoonllc.com
gradualcommission.com
linguicapizza.com
mintedascension.com
movilio.com
natuurlijkmelk.nl
siliconrodeo.com
songtoan.com
standingonherown.com
stemcellohio.com
universityconnection.com
wristwatchdb.com
www.allproconstructionco.com
www.catboykamipremium.com
www.fullmoonllc.com
www.gradualcommission.com
www.linguicapizza.com
www.mintedascension.com
www.movilio.com
www.natuurlijkmelk.nl
www.siliconrodeo.com
www.songtoan.com
www.standingonherown.com
www.stemcellohio.com
www.universityconnection.com
www.wristwatchdb.com
www.xn--beb4b.com
xn--beb4b.com

Other certificates including the domain name standingonherown.com

(limited to 100 certificates)
www.eyesurgerytucson.com
www.stemcellseattle.com
standingonherown.com
4dwear.com

Certificate

The complete raw certificate details for standingonherown.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTgU3wXpTH6rpjYW873H
QmHyuPHjkr93Dr3mqENl1OjEuHqNWfnwvbc9LrPXio0YRMTwYI5BRhmAwxwxnwka
cX3fvybFopfaYprCoBasyFZbFcjmCIpQnTQLYrfheP3NqzP5Z687kLl/tnGIFMCO
iWVR+uuxlj4BU9Yv2hMXzNDA0Oo39qSMvKHHUEsdilGGS8+d8MdqP9wsLMTsmwit
WUSxtCduQTOkXuWVER+eeDg4/mBiq63B9ZlNCIoYQH0/cTq172WMJo8Tgjrym1D5
S8xsNbTOZYMX6ifx1M+qHAEHTsbo2+SxJhBUkLr0Y5rdqf5zUfJBfjji3T4T0FKk
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316939034089845992187691958481845198716526
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 15:56:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 15:56:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'standingonherown.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23381741250918077991719411344386379858850695371942779286012425961855508695983411833284032146966719133363888913070513385410514407805098340804418867980595020445062155893625318509122235840155805174802804213260010383125045783544736467812409092212665501017963858590147176236401886536716588089503593180237456730507143744138265605473613956410269902806649107885743516580276433142260603815564656977304869667454839842061558260494680207114276864067230338236224675345288304050135511993671742288171669781881742880173752660797265056029413972586324881738967816455500029690620670937471435737416463682716438777190221996334485190386751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4ea1413afa2b493e35b69eb9210c56c789a3e31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (648 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allproconstructionco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catboykamipremium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullmoonllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gradualcommission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linguicapizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintedascension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natuurlijkmelk.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siliconrodeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'songtoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standingonherown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellohio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universityconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wristwatchdb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allproconstructionco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catboykamipremium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fullmoonllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gradualcommission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linguicapizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintedascension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.movilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natuurlijkmelk.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siliconrodeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.songtoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.standingonherown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellohio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universityconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wristwatchdb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--beb4b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--beb4b.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f59224f290000040300473045022100dfb58ba0e80004247c2b81005973e0365ec7e06b07fc55d4441a00a532b8c51602205b43543cacb2ce036c59832f095d5eff61e20b82cdc0a5ac4a9bf0a05a5e177f007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f59224ee20000040300463044022065e0f7224201a16dff592503bb756af5baa0613c4e7afc6900a3407e102db31a02201460ccd17198caf2b0dbcfb86eb0941222c763f744a57f35b12de63a42ae9dd9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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