blockelements.com

Issued by R3

About this certificate

This digital certificate with serial number 04:14:8d:00:0a:89:a4:01:77:39:55:bc:eb:d2:9e:9c:ec:2b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=blockelements.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:14:8d:00:0a:89:a4:01:77:39:55:bc:eb:d2:9e:9c:ec:2b
Serial Number (int): 355442212426594540608369219595721521294379
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b9:16:9e:f8:28:5a:21:fb:fc:c5:1f:e3:37:4d:be:0b:f1:15:c1:40
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:b6:73:a9:d3:b0:6c:a9:64:5a:04:f8:2c:44:17:f9:f1:b1:ee:b6
Fingerprint (sha256): a3:ba:c6:f6:5e:20:df:89:27:0b:39:86:39:99:94:7a:57:ce:b6:3d:04:ba:cd:51:3b:f6:40:b9:74:7e:ad:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate blockelements.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blockelements.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blockelements.com
www.blockelements.com

Other certificates including the domain name blockelements.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for blockelements.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355442212426594540608369219595721521294379
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 21:02:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 21:02:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blockelements.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 625981946451716443747585022618780200141818109817485361560498171243227959118192466606139607546296617369932496042228939985653352244130379055977478321524833109397714763697098064585557107410358723721030889328221220475920021017485525086006639916416716240514075269129202256552386214784745663325844834403252707756610012293301614548584816455032664909903585265615733847225919450435146659323199809536956350733438549753429854332999143624128847719356771303755929897097066015735588178862291443625626369745634746740180086793749483721549763765564056469312061433089247459232004427943910590934778915731710508871878732245000072864875387250461961137852418232779428420423799985914854750222289604920818334206851992679951528506064917776433028930933803959033881497241235447614704295654167088688649583799032346160138598921886979114489427817948172650263973535971420037432994076332420625053417395130320237343366995961379020451298710797257135421297449119234570255291967399811735654160120800938016205119383462867873190682512970991977087608110117760595084374472452173357088433471958661731736816722919535316648100581183421195906933299147776028229252272782234440000026982770277658238919250104290104299124080853019949989201541142217917292497458688496155084463953867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9169ef8285a21fbfcc51fe3374dbe0bf115c140
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockelements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockelements.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d33320e5f0000040300463044022044590229422ecddb31c9f8bc06f05bd5a172b5d3a13f1ea396804678fa765380022073ef646c4a631edeeeff95b4b6744efdf2af0c0b8c944f33104389909d78aba700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d33320eb50000040300463044022076a8b628049b09d50d8a75e95f2bacb414016c2b78541e1073f45ac3efeb544902207ee2fc0f52892abd5067f2d3f67ae43f94fe0cdc04d333b0da447334c062f33c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b709c67899440bb47b7d793f88d7a360ab698877e0493b9595d73965a43272e0633ae587732893e79c58bb1229c77add17bfc4742d51c4c5b318a483a8354f61956b869e074c86727979935ea8350fafa66aef103a60615efcaa1d0c8db353591ccf82d9a87722c25686370bab86a1e60abce1a3040a9f545f042a72aff8da117d62f74d2431b642411f975d9c47ebaec2653c68179b64ad151b83079f8c208100f62bcf5ead272179cfe86c1a51e21c65d937e56c400181e2e2e06fb85f4300a38cc629da327b0de368182da5084d59288c52fb69802a97a2ad71655bb2de3bb524aaca61917f9fcd19e2eca3bd625a3674f5ecada73742695ce080fd0d0e52