bookself.app

Issued by R3

About this certificate

This digital certificate with serial number 04:43:99:44:6d:a7:a5:b0:d5:1e:eb:16:f0:a4:cd:77:69:15 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bookself.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:43:99:44:6d:a7:a5:b0:d5:1e:eb:16:f0:a4:cd:77:69:15
Serial Number (int): 371451789494350364877288117126563695651093
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9b:62:2e:46:65:e5:cd:5e:20:0c:14:6e:5f:38:04:5d:fb:9e:9e:07
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 24:bf:28:59:ec:bd:bc:d4:b6:41:29:83:22:f7:c5:08:3c:a1:d0:87
Fingerprint (sha256): a2:a2:57:e5:39:e3:0f:83:36:e7:ea:44:13:f1:d3:64:d6:2d:df:0a:30:33:2e:5a:90:49:eb:b9:d1:a4:31:ac

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bookself.app

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bookself.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bookself.app
bookself.app

Other certificates including the domain name bookself.app

(limited to 100 certificates)
www.emilylau.tk
www.hitefy.com
devamin.xyz
bookself.app
dev-games.loophereandnow.com
go.bookself.app
www.bookself.app
www.sit.cl
go.bookself.app
bookself.app
bookself.app
bookself.app
go.bookself.app
www.bookself.app
profile.bookself.app
bookself.app
cgscope.co
www.bookself.app
www.bookself.app
go.bookself.app
bookself.app
bookself.app
sic.camaramucambo.ce.gov.br
go.bookself.app
www.bookself.app
bookself.app
bookself.app
profile.bookself.app
*.bookself.app
bookself.app
bookself.app
go.bookself.app
bookself.app
go.bookself.app
profile.bookself.app
app.alignedorgs.com

Certificate

The complete raw certificate details for bookself.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r/X+4+YcAtPnn12kWBK
/zekNZ5qiDryuT1YOnVA1x38eZNIrngemnhV0WP/9se1Pk3NAatk6ZlqHvCjK0QA
a0d3hZDld3KXJa07tXsA1lhwHuD7DFVG0STYWu1Ho3BQXwYPHvwnB+MfRFnGHfRE
T3M7PtFLjeKOVqLWT2YblGtQbGxpYrOm1//4WGIkHQ2QHzmO4/39/DcDokhGgoeR
YK0TkVP8cD+3dxt5H+RAbqYKoUuZa4rtchyxtu9EkFBxfyFKsmyqFmK4JmPWxPaw
HxGZqJi9J6n4YlTnZXHmimdV5HDYu6kcFjHOqcUN0kjZnFGvt352H3YmHV6kObdb
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371451789494350364877288117126563695651093
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 14:23:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 14:23:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bookself.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26604645688448803321294580150620787170066985051381629064795959467171192376940223679411803671359961755512489636632683854495889685587393288587060300634143591332819515725638709135893697936581415899322124259311495405298969881585493291827698401033277200598556858477638814953426663840211162940118043608892293860610491493605476091178503871451757410418648646435011811731110295623668612894805307817557451934244389295715731247028691896607945210713346139477271491910143843257664479445945506705182231169581616870066682058740302972837242951850766679835757300566676683409216906117098437519144376889808692344513931966300570894424921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b622e4665e5cd5e200c146e5f38045dfb9e9e07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookself.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookself.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b3e3c83370000040300473045022100b46a52a948adfc82d52f52165da257aa942b8f14fd3dc63e9eb05909c304cfc202202666dd91a7a4a03bf4738a5fefdaea30bf4f92da5db4ea97e63da45149dbfa1c007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b3e3c83510000040300463044022053f7bf2094b4e19062c8f2bef67477207a83429fcfc76f358d45a059e327214f0220554dd02083238fe94345022347928e86f0f2c9e41ad8c03ec5b2813eb69bfc8b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000e383e292faff2adb7ea454df2b6a6212e25a09efb386e0d66fd986e17a64b60d8188cff094474d3fcfebd3dc69a1fe630145de274b744376302608a264afe65cd25fb400f509b1a2f35a9f8390f990cbfa971f383e71b485b3b1ddf3e079ebc9974122d27bdd40183fb69e3a4be3654b2f13cda6573b20e728b1bea1a52d91a02944379c2eb19e82559b6b665ad2c2e4696c3b1e4d89b26e1cd8590111e7157f58549934c305c2e31e7113d94ac9d2baee79b74a1065ca094ed8bd24f411a661a8f33140d4a61f95e8ed3a0413a2d4b1f7d6387bfa9418e244f80250c7b2c9d9e062d0f560ac4bbc5eab7fc82eabc8a3e3e81263ef268d9603845171f1deb7e