mielixir.com

Issued by R3

About this certificate

This digital certificate with serial number 03:4e:ee:79:ae:43:b2:47:64:0f:08:d2:d5:98:23:5b:00:af was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mielixir.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4e:ee:79:ae:43:b2:47:64:0f:08:d2:d5:98:23:5b:00:af
Serial Number (int): 288195870480533365343750817857589030355119
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:87:09:8f:79:ab:9d:17:a5:08:7d:07:20:c5:3a:90:af:f4:57:fa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ad:34:f8:f2:65:98:cf:b5:70:3a:70:58:0c:6f:6b:63:0b:65:34:8d
Fingerprint (sha256): 9d:12:0c:79:7c:30:8a:1b:d8:b5:57:c1:c8:6e:43:32:18:da:9e:0e:e4:72:22:f3:2c:70:0e:86:8e:19:95:53

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mielixir.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mielixir.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mielixir.com
www.mielixir.com

Other certificates including the domain name mielixir.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mielixir.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288195870480533365343750817857589030355119
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 09:02:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 09:02:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mielixir.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 872199859234287735073939788453131055597547576556494103087512295661336195895270181069773813677430728580063527124841240330927295993708727290029596014719551370891930975633729008760444906045434352314899750086665740822813644826585556676300686406917231585030448526541133275559889898022990936149856077298347760040346199620284314220977276486397074745548367574512063093435371964189104814458770947488001024149821939203402000654592369421341568578657268757958438352103633108972417029986227418660800552917591412795950855524933851585965967598947093488287114676845356085817540354922457140327476291817812871959869771549934135617303781093742135594539358930281853667606972900322312530567777714622236204802913554903922186907929085163729762977448155580494096429178302264497031245417038151365015843135061461679995645290657220600661736069555549927814472034995512882209099862737037498619937221114409207416772761224099360233727727692855871526991395138079246789125370488593345528351437112070642220541358261124844416716661422252639561782032228272513763577476092442581844348122995522971046439151688535224218727288065776190465019397484032236110873677826306807748040234397250277203683487362121976239299752657307674066027866051819311043206040116109966710678100241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9987098f79ab9d17a5087d0720c53a90aff457fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mielixir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mielixir.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c0b14a5fc000004030046304402206e431c418ad9ef2b6614f959ae1db3d0d12b11c478efbc7218266388804e6b1c022015fdf0656e132d61c7aa68ee82206ab3efdc02e5f4e22f8ad72acf6a7bc1f5150076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c0b14a61600000403004730450221008ce71d625001004be73e3ef1f98a5567251e8de7ff95e2cdfdc6f39ecbb0bb3b02203f24171ed467c550c65da3844d3f5cb980d457cca7ac6f31fe89990147b48b01
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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