waitingchairs.com

Issued by R3

About this certificate

This digital certificate with serial number 03:88:24:b8:0f:18:7a:18:a1:c6:c5:d1:50:e1:06:8d:cd:c7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=waitingchairs.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:24:b8:0f:18:7a:18:a1:c6:c5:d1:50:e1:06:8d:cd:c7
Serial Number (int): 307664067593174005255101820426581955169735
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 47:06:ad:c8:cc:b3:a1:7e:f9:22:ea:07:55:43:27:46:1f:f3:7f:9c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:41:20:80:b7:c5:a0:91:c6:54:e5:3f:81:50:3d:43:1e:11:61:0d
Fingerprint (sha256): 9e:f7:cb:64:52:8a:11:d8:e4:3e:36:bc:47:50:e9:31:ef:c6:17:12:ca:4b:fa:53:ee:ba:99:7c:7d:5a:ed:8e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate waitingchairs.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for waitingchairs.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

waitingchairs.com

Other certificates including the domain name waitingchairs.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for waitingchairs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307664067593174005255101820426581955169735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 03:08:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 03:08:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'waitingchairs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873426111250329639894003123787046741447219613905664772887378292548037627255981440925869029889417300542479094304934332932028367572500160052247402411410546842744992335581851055110759324280629759202591534432553068413397194851715011398681966008903409796721352063988637519431905327494706298557774696022951116019365718852864775662518416118052508194157838268256819855032786673539425265297930400561488309861617109128710394732465298166882314288125856023693711243203746607486419061968043364577019549410775928357843086959847534562130646685763541372303300526547007680505622994176754558683969174747747789833270987447114101016435020986240360010974795718148422382974859293688989528919873012766272002868292426988855778455506716907011680456760010292893711926835575132043121418770691072814161253096576609581963328203375503354166729360788979412583251158714143229895912346689627991170632816933023314170083098025902887420066922623499464361080191891081445392234037803801292974843197609147925174329613285282744555253550536376668750498710287662614070422179087794878784448659299003478294492945981838040642212034882397792137582303685498863132484576463998737604211459711861380742015662306104244185585140940024813725612851624959853740929529539765780643344624577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4706adc8ccb3a17ef922ea07554327461ff37f9c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitingchairs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e4a9914dd000004030046304402206ccd85ca1cd680fed6d13f28d8285761683121fb66003d80c38415c8f6946e7b022059baadbd77cf9a64ae3a69e6f0f054700ba79599440371276f72651a23ef836800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e4a9916d00000040300473045022100f6d326f2eed06385fcbd1ae56d4e5f67c5f210f1a82cf3f44cd3d7031fc304bd02202a7d13e86f6e470aa5993928c55d93afa3ee69eb274c2e7a0f8b53b92e76d906
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0094098a8d8a6d7e3099371a7c238a03745257fa5c2c844ba317b4b768a3b8c3cecb09e5ae7405da97c21911a1d252d2596247d6e8375a868f02bf7f4f3978a3d4f12dc35c4bcdf9ae7c65d3e5c2ed26ddec8dcdde653428b178ee60268beb40b500c5be01d4842945c3ef0bf61a9165c5e9b040ac10c3c23dced2c4d6476b49d820209e49d6a2961fdc8c2fa73c88f314db793a106cfa57d89deaf19b3881fec3e42e1ccbfec218d6f744b7e53dfb22b67efa80af8a7afa7f014f0c2e5908226987d314fd8cce5e0f87bf3328c0de9b5c407e341dff4fbe2778489701928b03bee9c9f4f803accb69b12ef2a393e858d4b3263b13c7a490231e43f89345f72130