defis.ec
Issued by R3
About this certificate
This digital certificate with serial number 03:b0:6f:89:5f:53:ff:3c:d1:b5:da:6a:20:18:a5:4e:f9:85 was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=defis.ec
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:b0:6f:89:5f:53:ff:3c:d1:b5:da:6a:20:18:a5:4e:f9:85Serial Number (int): 321374811959051496481678504867041037449605
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ca:45:bc:3e:12:3d:c1:2e:b6:5e:77:41:1d:1d:f1:b7:a7:d1:14:4a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 67:1d:9b:90:93:31:d9:f1:37:11:43:ed:41:c4:78:e8:00:38:69:f1
Fingerprint (sha256): 9c:f4:f2:bb:be:04:d2:55:dd:58:14:df:47:06:09:6f:f9:f4:5a:d6:98:dc:c4:6d:58:16:a4:a6:59:74:1b:ff
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate defis.ec
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for defis.ec
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
copyrightgov.com
defis.ec
integrityseniorinsurance.com
linearmotorpress.com
myreiloc.com
nftapostasy.com
podunk.com
realestateconsumernews.com
tobemanly.com
victoriadeclaration.com
wearethepray.org
whoxxx.com
defis.ec
integrityseniorinsurance.com
linearmotorpress.com
myreiloc.com
nftapostasy.com
podunk.com
realestateconsumernews.com
tobemanly.com
victoriadeclaration.com
wearethepray.org
whoxxx.com
Other certificates including the domain name defis.ec
(limited to 100 certificates)
Certificate
The complete raw certificate details for defis.ec in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISA7BviV9T/zzRtdpqIBilTvmFMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTQxNTE5NTFaFw0yNDA3MTMxNTE5NTBaMBMxETAPBgNVBAMT CGRlZmlzLmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3ZvWk1u augLbQHQFmBIO/0exrlkMFcMg+uZ/kQOkcPOgMAKati/F34piMnDntJSdd047NFi 1jTLHiIY4Gyoi5lUHuApd0pJZJaApJ0j0dCAplpWzEr3qIyf2A2cx99ZlRkwcCQA OpoWGYe8b7RXbD+Mh8oFjHM/vyXPj59YlGc8c0FAOC4f9DgfFnBKNj1XxLeoP8ok F7XG/WpE5ScW/AM+TNgTZ3UXTXSZ5mLJTIINg2wrQ5eV28F19bte/ka15w85FyLN tgp4AT1PuniL6dNc5+R6k0RFCT/XCVJiQoWDrb8JxfDMHN8fPxcJM1kyXriZ+3Lw OKHcurNLGmFaCwIDAQABo4IC3jCCAtowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTK Rbw+Ej3BLrZed0EdHfG3p9EUSjAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+d ixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxl bmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCB6AYD VR0RBIHgMIHdghBjb3B5cmlnaHRnb3YuY29tgghkZWZpcy5lY4IcaW50ZWdyaXR5 c2VuaW9yaW5zdXJhbmNlLmNvbYIUbGluZWFybW90b3JwcmVzcy5jb22CDG15cmVp bG9jLmNvbYIPbmZ0YXBvc3Rhc3kuY29tggpwb2R1bmsuY29tghpyZWFsZXN0YXRl Y29uc3VtZXJuZXdzLmNvbYINdG9iZW1hbmx5LmNvbYIXdmljdG9yaWFkZWNsYXJh dGlvbi5jb22CEHdlYXJldGhlcHJheS5vcmeCCndob3h4eC5jb20wEwYDVR0gBAww CjAIBgZngQwBAgEwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQB2/4g/Crb7lVHC Ycz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY7daGyiAAAEAwBGMEQCIGkrn6oW+sfj ZbcfiqZ9Ktf0WkpcWbPkkIqYFhC3UFKmAiAwCN3djOWFAaq9+SbPDPmt0X3LA1Hy CU1QusjqfdCe5AB1AN/hVuuqBa+1nA+GcY2owDJOrlbZbqf1pWoB0cE7vlJcAAAB jt1obQ4AAAQDAEYwRAIgc0Y4/08HDO0vL/g1wfnSoOSwHQLeMThKcko+Wzx4fMwC IE/J/HP8+Orbn1M8oUSOQz1kywe4rgYcZT3zQmPxMGTvMA0GCSqGSIb3DQEBCwUA A4IBAQBmyCWt8MrR1uKplzfZfp0FnsMz+/U1hb8ix2/34XyGvtzGgrWtZlvERGWf BfdCVw7C8MqNg+212tKAaPA4KUv/VTm/7SyclIU2/Nh7oNnSORZiOIZM6b6aLxKu SUa9H5lth3iqcW312aL2ZrW8QZyPZ4W0jycVdhZiAjj7NAZcssiZqbI4LsPEU6oe 6sQRzpIS73pM16M1iYkaNcH+zIYaIZghTEr+y+YfPPT9FHMiXJWMSfxvQibU97zc crUpzwE5EKQffNeIHDN7GFdziljvn0ZLMQC46k8EtLGDa0xTBIsv8oSBxY/Duwox H3uco686UaAgNmTCvt+V5jNdD4VY -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3ZvWk1uaugLbQHQFmBI O/0exrlkMFcMg+uZ/kQOkcPOgMAKati/F34piMnDntJSdd047NFi1jTLHiIY4Gyo i5lUHuApd0pJZJaApJ0j0dCAplpWzEr3qIyf2A2cx99ZlRkwcCQAOpoWGYe8b7RX bD+Mh8oFjHM/vyXPj59YlGc8c0FAOC4f9DgfFnBKNj1XxLeoP8okF7XG/WpE5ScW /AM+TNgTZ3UXTXSZ5mLJTIINg2wrQ5eV28F19bte/ka15w85FyLNtgp4AT1PuniL 6dNc5+R6k0RFCT/XCVJiQoWDrb8JxfDMHN8fPxcJM1kyXriZ+3LwOKHcurNLGmFa CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321374811959051496481678504867041037449605 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 15:19:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 15:19:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'defis.ec' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24169918709730447713847711587400249734170117035861068210060132167356209244084349288106579771366276873810028451501796239629601738037030402195562861242662212277835223319038529158047386781407738891089174285804856236747947519470432497690993591418087221866395357710781183987957206298961674465138878286102236987181768468996719368778911117783587759057769349622022954230673072228712855529221593396231657006367515448748969977827927256268604150352538185212893435557011610644326806053626915430701715211907005280828941305163039768297887369324052869455225883298656177190610596521131713512256633857239783658591060705780455601953291 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ca45bc3e123dc12eb65e77411d1df1b7a7d1144a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (224 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copyrightgov.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defis.ec' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrityseniorinsurance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linearmotorpress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myreiloc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nftapostasy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podunk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateconsumernews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tobemanly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriadeclaration.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearethepray.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whoxxx.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018edd686ca200000403004630440220692b9faa16fac7e365b71f8aa67d2ad7f45a4a5c59b3e4908a981610b75052a602203008dddd8ce58501aabdf926cf0cf9add17dcb0351f2094d50bac8ea7dd09ee4007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018edd686d0e00000403004630440220734638ff4f070ced2f2ff835c1f9d2a0e4b01d02de31384a724a3e5b3c787ccc02204fc9fc73fcf8eadb9f533ca1448e433d64cb07b8ae061c653df34263f13064ef . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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