kadatta.com

Issued by R3

About this certificate

This digital certificate with serial number 03:94:dd:2b:7c:9a:ef:1f:03:49:a7:a2:c6:5c:ff:38:4f:7e was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kadatta.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:94:dd:2b:7c:9a:ef:1f:03:49:a7:a2:c6:5c:ff:38:4f:7e
Serial Number (int): 311992633282706948227528249864201375862654
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:3e:72:8d:4f:4c:35:96:87:a1:5f:b9:fc:3e:69:cf:0e:d9:fc:ad
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 06:79:82:47:b5:a1:d9:5d:b6:b3:1b:c5:4a:91:3d:04:f7:39:3b:01
Fingerprint (sha256): a3:b9:93:e8:3c:c6:19:ce:ee:76:57:5b:1e:4a:70:59:09:db:42:9d:9c:93:57:05:e3:67:fa:72:ab:2a:d6:a3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kadatta.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kadatta.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alternativeinvestment.ca
capecoddreamhome.com
diyetisyen.life
doneforyoustore.com
drugsville.com
freedomskulladventure.com
fullyshine.com
gendertype.com
imacinstitute.org
kadatta.com
manufacturingdrone.com
portfolioenhancementgroupllc.com
raubgame.com
vgmalone.com
www.alternativeinvestment.ca
www.capecoddreamhome.com
www.diyetisyen.life
www.doneforyoustore.com
www.drugsville.com
www.freedomskulladventure.com
www.fullyshine.com
www.gendertype.com
www.imacinstitute.org
www.kadatta.com
www.manufacturingdrone.com
www.portfolioenhancementgroupllc.com
www.raubgame.com
www.vgmalone.com
www.xn--8dbt1ae.com
xn--8dbt1ae.com

Other certificates including the domain name kadatta.com

(limited to 100 certificates)
kadatta.com

Certificate

The complete raw certificate details for kadatta.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjrkk3QrY+W7XexUEUIT
NYerMiQCQEDCfy+pJkdV7GkzVIl3h8QjYbKWVa6DXWc34q7sMxTQOFREM0z/9Q1p
CreDL8c53jyB9XQiQ8D25janUiuy36UdzKuIXKwa43DGloputDH+ciAIxHzTXaOS
BoyE6Tn1Idm7vvTGqF9BtkgpNFIJjh45vTQPLcxC8oJBy+IWi2udDU5KKbWFa735
p6aHFTMSB5ysCg/+dbxFB+JuJnVLV64BcUcpaX69hYMjaS1IVOKnEsl5sVzwdJFq
C6ompGHt6joP7lUnGxeIGJAIxt0Ei51yU+OzLjkRGh+l6t0s0QSgEZRBxlnd5mgA
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311992633282706948227528249864201375862654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 00:23:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 00:23:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kadatta.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24014319102575807570594741071412175036160373773730199773001949786341230867450523464032515682974775174042954917934949783817942888888741231302362495114273838123061079282861151100600430158991019620512762699927531249514399365680695268885889893700345898142051744315010980047105247012814113474054513093366220175511727346997596418546028440672031296910469323738604785380397231459463704567625236186359833615628455124768269684648054020537211336045321079626470428734582143084029261933848058246802806151622276805419222861023088576883471252810959016747462748605431400529401738492574477770096229952981535000730204439483626304307227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a3e728d4f4c359687a15fb9fc3e69cf0ed9fcad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (656 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alternativeinvestment.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capecoddreamhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diyetisyen.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doneforyoustore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomskulladventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullyshine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gendertype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imacinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kadatta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manufacturingdrone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolioenhancementgroupllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raubgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vgmalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alternativeinvestment.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capecoddreamhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diyetisyen.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doneforyoustore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drugsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedomskulladventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fullyshine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gendertype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imacinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kadatta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manufacturingdrone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portfolioenhancementgroupllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raubgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vgmalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--8dbt1ae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--8dbt1ae.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f55cc00110000040300473045022100a7e51d63e020edd876951d56bb35e67751ace68832a726a061374d93a210235f0220643d546436f79bbf709ea717f72cc271a88c9ad7104f18442c97fb98b8bee968007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f55cc00110000040300463044022074d4b4c61c52e5f6290bc46919e9f7a7556a195b75df7788af2f94437d7549b902203bdc63e5fdb99fb14831365f0f85c53c4403e6c0569a83c6ad754cd795df6bb1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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