buildthepeople.com.duiinsure.com

Issued by R3

About this certificate

This digital certificate with serial number 04:1b:5a:5b:81:7d:f9:cc:81:ba:05:40:00:95:3d:6e:5f:46 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=buildthepeople.com.duiinsure.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1b:5a:5b:81:7d:f9:cc:81:ba:05:40:00:95:3d:6e:5f:46
Serial Number (int): 357756873278952762384160243507135989571398
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 54:32:5d:32:46:25:b5:ad:4e:69:f6:e0:9a:74:c5:9e:04:12:78:cf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:ed:1a:b5:12:0d:cf:f7:dc:13:a8:55:d9:56:ed:8a:1a:27:6d:f4
Fingerprint (sha256): 9e:d6:d4:e4:1d:ee:86:f9:cd:b4:a0:a3:3f:80:26:1f:84:99:0f:d5:9a:af:5c:df:27:81:75:d8:bd:9f:0b:02

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate buildthepeople.com.duiinsure.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for buildthepeople.com.duiinsure.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affiliatebusinessplan.com
animationvideosuite.com
buildthepeople.com.duiinsure.com
daysdaily.com.toyforvip.com
donatemymoney.com
hempplease.com
polyphoam.com
sculpit.diet.arcadedrifter.com
smartnanotechnologies.com
stillwaterhosting.com
therro.com

Other certificates including the domain name duiinsure.com

(limited to 100 certificates)
technology.world
indestructible.bible
bambooremovallongisland.org
womensshelters.org
bibliacatolica.bible
feedyourself.bible
technology.world
brassexcerpts.org
fldc.bible
www.quickhomecare.com
pleasure.com.ableaustralia.click
godaddy.tube
dska.org
cainsurance.org
zoomdia.com
technology.world
zoomdia.com
simoleon.org
dew.sc
stlouiscatholic.blog
zoomdia.com
sidesleepcomfort.org
appideas.equi.life
popmail.co.za
technology.world
buildthepeople.com.duiinsure.com
l76.com
capitolis.org
godaddy.tube
technology.world
omniscience.software
crownpizza.com
technology.world
lataza.com
worldoftank.asia
godaddy.tube
sculpit.dance
impossible.ca
homeschoolactfl.org
omniscience.software
ladyboy.ca
hydratight.ca
cheeselam.org
godaddy.tube
bible.bible

Certificate

The complete raw certificate details for buildthepeople.com.duiinsure.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ViU40WqqH55O9mJ1Roq
oAscpEbkMe5BXegGGZW3H92o3G5ZYohK/FssOAuE2AGuOE5oCmnU0qjEE4VF6HgF
B2e+QoX4y6S5boPUQzdCZwBNV1dMKUL6WFsYrvGxZbpztPOLYCIzo9wnoZxMnv1M
geO4KBTfbW0600OS4dHd8YW1ox6MpkllewY0Y941A0vU96xxGSLmZf+BP8mqYjQR
COlSeg05w/Ph2Z6hH4PJ4gACYyXN6c5feeXbbh1Za5IZ3n8HdrQlAmClXbx7FPAS
CVFrF6roz4DvkMvLqTdAD47nXyk7skodA+9R4Plo5stLH0HeDKMr8bf51ifM5rBd
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357756873278952762384160243507135989571398
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 12:55:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 12:55:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'buildthepeople.com.duiinsure.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29962159488434733177263668020425551397726994136482581704990824177507949752864633993308058752703287209866440992329651103305061013097005066521484284470889244895205255815710887086227354747502312827187900417780620382390577595260976864979286632535295616397711666961841293655795413081469115543900242831683546359112567883262067439153475334181537665713134919894924187104720013329460426086590852422727113639085094859996037876201113781554244961031545319921880481197191714664787012457780282683060921344795537450632593800526587788149493058897321437640523666387904551074692250744212640189152128187655822258408022562038787972554123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54325d324625b5ad4e69f6e09a74c59e041278cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (263 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliatebusinessplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animationvideosuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildthepeople.com.duiinsure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daysdaily.com.toyforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donatemymoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempplease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polyphoam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit.diet.arcadedrifter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartnanotechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stillwaterhosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therro.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c637659750000040300473045022012d782780d3dc76cc764354335f40a6e908cce0571d9696449ed7dbc7ab29e39022100c2f219ab2b18d7e4ee94f386a435c2e34bb28218fab867cdb153dc7e33285bd800760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c637659b20000040300473045022100d151c72b7abe71ed2f18c79d915c6d36c14f993e31b2feaafd138d6eea760f5502204838ba8a70798ea16da3bc0cf2a2f480e03046653c32e36da1c541d0acfb4d89
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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