mielixir.com
Issued by R3
About this certificate
This digital certificate with serial number 03:4e:ee:79:ae:43:b2:47:64:0f:08:d2:d5:98:23:5b:00:af was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=mielixir.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4e:ee:79:ae:43:b2:47:64:0f:08:d2:d5:98:23:5b:00:afSerial Number (int): 288195870480533365343750817857589030355119
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 99:87:09:8f:79:ab:9d:17:a5:08:7d:07:20:c5:3a:90:af:f4:57:fa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ad:34:f8:f2:65:98:cf:b5:70:3a:70:58:0c:6f:6b:63:0b:65:34:8d
Fingerprint (sha256): 9d:12:0c:79:7c:30:8a:1b:d8:b5:57:c1:c8:6e:43:32:18:da:9e:0e:e4:72:22:f3:2c:70:0e:86:8e:19:95:53
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate mielixir.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mielixir.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mielixir.com
www.mielixir.com
www.mielixir.com
Other certificates including the domain name mielixir.com
(limited to 100 certificates)
moi.me
0hope.com
www.andyogaestudio.com
curlycult.com
lionheart.mobi
primeraclase.com
lionheart.mobi
hidroneumatica.com
naturalgas.world
bankruptcybyzipcode.com
abuja.work
lionheart.mobi
numberssystem.com
darido.com
alexjonesexposed.org
www.lairg.com
beforeskin.com
mielixir.com
tresata.org
mielixir.com
primeraclase.com
beforeskin.com
www.teachrapid.com
neuralporn.com
primeraclase.com
xrdice.com
trustvista.com
getitn.com
naturalgas.world
0hope.com
www.andyogaestudio.com
curlycult.com
lionheart.mobi
primeraclase.com
lionheart.mobi
hidroneumatica.com
naturalgas.world
bankruptcybyzipcode.com
abuja.work
lionheart.mobi
numberssystem.com
darido.com
alexjonesexposed.org
www.lairg.com
beforeskin.com
mielixir.com
tresata.org
mielixir.com
primeraclase.com
beforeskin.com
www.teachrapid.com
neuralporn.com
primeraclase.com
xrdice.com
trustvista.com
getitn.com
naturalgas.world
Certificate
The complete raw certificate details for mielixir.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgISA07uea5DskdkDwjS1ZgjWwCvMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMjYwOTAyMzFaFw0yNDAyMjQwOTAyMzBaMBcxFTATBgNVBAMT DG1pZWxpeGlyLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANXL ClIvcXaBwCx5Lr6oFBMyekeK6dn9n/cNfbTMYleLOdmk3elSdina4+tSjGbR0toh PX7dSatGuQfsDnSW8xxv0lxE3liCN03hLwX2HBKdoNtKd0Le3hN7kGEjIO7auQ/H Id37a2lg0EMehwwImwM5hX3qunIXl+xS5pnWNffYc3gEeFZhClQbimOIq1HEIieo u78W1VlsUif9DAXV3BzCq2WCOTEuUC2AI3fpR9vT8QHiE09G+ldggai/D783awOX 3b1YUOUlF6s5iFpIdnGAohXzrysW88PGeRlZcPN2hxPT66hym4biPEyobHZis2IB z5UHuOGGec/WVMl4mOTCq1G6lllWB0VTeupAlSwnLyuWRrbZ1iGzhX5+GD8JVB90 TPJ2IdtReCYDXauZqmzs7tXpsNEF4Ccyd+fHBDb+SvbdLK6iMU45aQqeQvrt43za 9Sc0MsoTQziIPeo4hpFCq1/khokfL14Iu02+EQdu54ih0hK+XQUFOXoQvFyJUhAd 5fXTY2GcVbn6Orq/aCige51kLtl6nGDyYxcIenbLYjrydevM4eIaEr3L+xQi+oSq 62oMqCbtnpRxqISynCazf2RV+QEJ1FAjsTwP0EgXiGY02KYDfzU5qlfoRjpTNnBo zTvltLc1GM6JrdOLXrhAxesHYgArgN5P8arvZhkRAgMBAAGjggIfMIICGzAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFJmHCY95q50XpQh9ByDFOpCv9Ff6MB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMCkGA1UdEQQiMCCCDG1pZWxpeGlyLmNvbYIQd3d3Lm1p ZWxpeGlyLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIE gfQEgfEA7wB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjAsU pfwAAAQDAEYwRAIgbkMcQYrZ7ytmFPlZrh2z0NErEcR477xyGCZjiIBOaxwCIBX9 8GVuEy1hx6po7oIgarPv3ALl9OIvitcqz2p7wfUVAHYAO1N3dT4tuYBOizBbBv5A O2fYT8P0x70ADS1yb+H61BcAAAGMCxSmFgAABAMARzBFAiEAjOcdYlABAEvnPj7x +YpVZyUejef/leLN/cbznsuwuzsCID8kFx7UZ8VQxl2jhE0/XLmA1FfMp6xvMf6J mQFHtIsBMA0GCSqGSIb3DQEBCwUAA4IBAQBKF3vpRnilXOeL9gYMV7J72hohsfNz tmJQ06eMpI1aVUClIC+Y+nsDnHu3bG86ncNEyEZt+CS73xp9b+KqedaumF91UDd2 O4bP6fIi2S/7341wJVdPn387JfBvbrVDYPU+FU4o0SwgYQjfrL6aTJ6Zg5zyBm6z NBNinUSemea0PLR8p5Vc/KSY1FOfIugei1ccS1fdGfAZ3ZoOqV6krhqcTtRli067 U04RZW9pO4aH/BYQpOlH45Y4lIcLQL8CJ4FpKcVnPN7wPWGbq0n6jhOCdLJhEgzS /8WSxWT4MPRnl8q7R4zDgtcFUE3atCM516wdr3brHp+SfwGOu7D1UtWB -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1csKUi9xdoHALHkuvqgU EzJ6R4rp2f2f9w19tMxiV4s52aTd6VJ2Kdrj61KMZtHS2iE9ft1Jq0a5B+wOdJbz HG/SXETeWII3TeEvBfYcEp2g20p3Qt7eE3uQYSMg7tq5D8ch3ftraWDQQx6HDAib AzmFfeq6cheX7FLmmdY199hzeAR4VmEKVBuKY4irUcQiJ6i7vxbVWWxSJ/0MBdXc HMKrZYI5MS5QLYAjd+lH29PxAeITT0b6V2CBqL8PvzdrA5fdvVhQ5SUXqzmIWkh2 cYCiFfOvKxbzw8Z5GVlw83aHE9PrqHKbhuI8TKhsdmKzYgHPlQe44YZ5z9ZUyXiY 5MKrUbqWWVYHRVN66kCVLCcvK5ZGttnWIbOFfn4YPwlUH3RM8nYh21F4JgNdq5mq bOzu1emw0QXgJzJ358cENv5K9t0srqIxTjlpCp5C+u3jfNr1JzQyyhNDOIg96jiG kUKrX+SGiR8vXgi7Tb4RB27niKHSEr5dBQU5ehC8XIlSEB3l9dNjYZxVufo6ur9o KKB7nWQu2XqcYPJjFwh6dstiOvJ168zh4hoSvcv7FCL6hKrragyoJu2elHGohLKc JrN/ZFX5AQnUUCOxPA/QSBeIZjTYpgN/NTmqV+hGOlM2cGjNO+W0tzUYzomt04te uEDF6wdiACuA3k/xqu9mGRECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 288195870480533365343750817857589030355119 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 09:02:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 09:02:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mielixir.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 872199859234287735073939788453131055597547576556494103087512295661336195895270181069773813677430728580063527124841240330927295993708727290029596014719551370891930975633729008760444906045434352314899750086665740822813644826585556676300686406917231585030448526541133275559889898022990936149856077298347760040346199620284314220977276486397074745548367574512063093435371964189104814458770947488001024149821939203402000654592369421341568578657268757958438352103633108972417029986227418660800552917591412795950855524933851585965967598947093488287114676845356085817540354922457140327476291817812871959869771549934135617303781093742135594539358930281853667606972900322312530567777714622236204802913554903922186907929085163729762977448155580494096429178302264497031245417038151365015843135061461679995645290657220600661736069555549927814472034995512882209099862737037498619937221114409207416772761224099360233727727692855871526991395138079246789125370488593345528351437112070642220541358261124844416716661422252639561782032228272513763577476092442581844348122995522971046439151688535224218727288065776190465019397484032236110873677826306807748040234397250277203683487362121976239299752657307674066027866051819311043206040116109966710678100241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9987098f79ab9d17a5087d0720c53a90aff457fa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mielixir.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mielixir.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c0b14a5fc000004030046304402206e431c418ad9ef2b6614f959ae1db3d0d12b11c478efbc7218266388804e6b1c022015fdf0656e132d61c7aa68ee82206ab3efdc02e5f4e22f8ad72acf6a7bc1f5150076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c0b14a61600000403004730450221008ce71d625001004be73e3ef1f98a5567251e8de7ff95e2cdfdc6f39ecbb0bb3b02203f24171ed467c550c65da3844d3f5cb980d457cca7ac6f31fe89990147b48b01 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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