defis.ec

Issued by R3

About this certificate

This digital certificate with serial number 03:b0:6f:89:5f:53:ff:3c:d1:b5:da:6a:20:18:a5:4e:f9:85 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=defis.ec

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:b0:6f:89:5f:53:ff:3c:d1:b5:da:6a:20:18:a5:4e:f9:85
Serial Number (int): 321374811959051496481678504867041037449605
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ca:45:bc:3e:12:3d:c1:2e:b6:5e:77:41:1d:1d:f1:b7:a7:d1:14:4a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:1d:9b:90:93:31:d9:f1:37:11:43:ed:41:c4:78:e8:00:38:69:f1
Fingerprint (sha256): 9c:f4:f2:bb:be:04:d2:55:dd:58:14:df:47:06:09:6f:f9:f4:5a:d6:98:dc:c4:6d:58:16:a4:a6:59:74:1b:ff

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate defis.ec

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for defis.ec

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

copyrightgov.com
defis.ec
integrityseniorinsurance.com
linearmotorpress.com
myreiloc.com
nftapostasy.com
podunk.com
realestateconsumernews.com
tobemanly.com
victoriadeclaration.com
wearethepray.org
whoxxx.com

Other certificates including the domain name defis.ec

(limited to 100 certificates)

Certificate

The complete raw certificate details for defis.ec in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3ZvWk1uaugLbQHQFmBI
O/0exrlkMFcMg+uZ/kQOkcPOgMAKati/F34piMnDntJSdd047NFi1jTLHiIY4Gyo
i5lUHuApd0pJZJaApJ0j0dCAplpWzEr3qIyf2A2cx99ZlRkwcCQAOpoWGYe8b7RX
bD+Mh8oFjHM/vyXPj59YlGc8c0FAOC4f9DgfFnBKNj1XxLeoP8okF7XG/WpE5ScW
/AM+TNgTZ3UXTXSZ5mLJTIINg2wrQ5eV28F19bte/ka15w85FyLNtgp4AT1PuniL
6dNc5+R6k0RFCT/XCVJiQoWDrb8JxfDMHN8fPxcJM1kyXriZ+3LwOKHcurNLGmFa
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321374811959051496481678504867041037449605
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 15:19:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 15:19:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'defis.ec'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24169918709730447713847711587400249734170117035861068210060132167356209244084349288106579771366276873810028451501796239629601738037030402195562861242662212277835223319038529158047386781407738891089174285804856236747947519470432497690993591418087221866395357710781183987957206298961674465138878286102236987181768468996719368778911117783587759057769349622022954230673072228712855529221593396231657006367515448748969977827927256268604150352538185212893435557011610644326806053626915430701715211907005280828941305163039768297887369324052869455225883298656177190610596521131713512256633857239783658591060705780455601953291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca45bc3e123dc12eb65e77411d1df1b7a7d1144a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (224 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copyrightgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defis.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrityseniorinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linearmotorpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myreiloc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nftapostasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateconsumernews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tobemanly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriadeclaration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearethepray.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whoxxx.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018edd686ca200000403004630440220692b9faa16fac7e365b71f8aa67d2ad7f45a4a5c59b3e4908a981610b75052a602203008dddd8ce58501aabdf926cf0cf9add17dcb0351f2094d50bac8ea7dd09ee4007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018edd686d0e00000403004630440220734638ff4f070ced2f2ff835c1f9d2a0e4b01d02de31384a724a3e5b3c787ccc02204fc9fc73fcf8eadb9f533ca1448e433d64cb07b8ae061c653df34263f13064ef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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