pumenengo.com
Issued by R3
About this certificate
This digital certificate with serial number 04:47:df:e9:48:29:d0:f7:a6:6e:b3:f2:e3:ca:56:ba:60:d4 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=pumenengo.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:47:df:e9:48:29:d0:f7:a6:6e:b3:f2:e3:ca:56:ba:60:d4Serial Number (int): 372906820890302210745570529352316205293780
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 5d:bb:fa:e0:8e:38:0e:80:aa:28:10:fe:fa:a1:01:58:88:48:53:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 01:be:62:19:04:06:4c:01:35:36:42:86:50:31:69:9b:bd:bf:03:ff
Fingerprint (sha256): a8:d6:45:27:f3:87:95:1b:81:ff:87:d2:32:8e:6e:b8:47:89:8a:30:0f:43:af:59:1d:a9:3f:1a:c9:0c:ed:cf
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate pumenengo.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pumenengo.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pumenengo.com
Other certificates including the domain name pumenengo.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for pumenengo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgISBEff6Ugp0PembrPy48pWumDUMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMTExNTM2NTVaFw0yNDA2MDkxNTM2NTRaMBgxFjAUBgNVBAMT DXB1bWVuZW5nby5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCp aDVxosWveWqJ5eCt986Fqzf8F86YRQJyklGw0tdbFPtH+ApAX+lG3AYypJBHhsQj dN7ICe4IAs/9TiSuCvcbaif3rVw9MyG0bpTHYBK1cvfbcw7AUhtUxfErZCLKLyjV vLh21kp65EYwU3Vj4MiC/r7HkLFsqL9jZjC/u0n3TlmVTOwuxXgAG46qwLE1mDjS yxjujnczoDXYN2yU+RMk0K6FkiOhX3qEhIjEjfUQ52hoifov098dyGfzxJvMOt9V Lit6iiPxLcFfM+zYBdTBn2ZWFisEyBmV/T4hbqPa6Q53dtpcu5h9ToAFSb9KaPlw 5qo1lslseKm0Coa/9gXwvodqjbiIkHgBeYxKRqVOuD5PqXke7Z97M2R58N32hHsj ImneGfjufr1FTf32W8urNNfpowSGzOwg9BJfSoS2r0MYOXT7o+IIydL/eHTjxQs5 cTixbVjKfZOOO9oUQZiR7diI5HttszyI2IONfOvmq8xLrYxgcFYSFghdaL/zKfJd dGI0LkO20DwVJgACMore0nki40vNSu4FzSERwKF/RCn3OUb7ni1AujDjyhxu5m+D jOFB92emwpLhvW92QhGFfAVm8kryN2AAQ2PIeEUkt5U755oUZqWl+eYSXAyBMxBz 10Jk7TUjZ9C9XdtVJPxTzQwa/ih7brcyouBGtvXF0QIDAQABo4ICEDCCAgwwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBRdu/rgjjgOgKooEP76oQFYiEhTyzAfBgNVHSME GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov L3IzLmkubGVuY3Iub3JnLzAYBgNVHREEETAPgg1wdW1lbmVuZ28uY29tMBMGA1Ud IAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAouK/1h7e Ly8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGOLl/UjQAABAMASDBGAiEA7TEz 07SzTAWbNk795UKaKa2j+McPtFv8PpXFwwnj8GsCIQCHsTew1aVrEMmRehnWkSkZ upnax1RlpJ7eNzcmonLhvwB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5 2IRzAAABji5f1PUAAAQDAEcwRQIgZsG/tn09mftk0kxPzBlMKSfzxKc3nC+Mm7FI 7HDBQVsCIQC0QSbLdJYj0MGdwbwWuQrZRWLkYhohZbET6E1CyauzmDANBgkqhkiG 9w0BAQsFAAOCAQEAnV7jiE89ildeA2tL3eK8HXfl1VuOi1lw4RJjmJWAU9fBjWLE fg+tnFeuQ6a0nE47jc10XNWlcfi1zBZK7qkZMLlaHx5T4MpLwx1uwGRAPZbrQqyJ F73jWd1asBvkcXc5Hc84nkfdGdLjM5I26Z+MIET5ywM0AbM24braIGHCrzfCxuA3 KaOmNTfz72tFDVFs3yX8ACN7IbYQDIQ95j1unomR6Q1Rtl+P2YmDl7DwZF27xECg h74SN0EQYs4uV20vtUbvr0EtpK7QBncGq//eh2ORckmuUYUw31aFlSsaHjbeHpXn w71Qh8YvkFNjNupnuIQLX5q7jvSNA5+KMr+XuA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqWg1caLFr3lqieXgrffO has3/BfOmEUCcpJRsNLXWxT7R/gKQF/pRtwGMqSQR4bEI3TeyAnuCALP/U4krgr3 G2on961cPTMhtG6Ux2AStXL323MOwFIbVMXxK2Qiyi8o1by4dtZKeuRGMFN1Y+DI gv6+x5CxbKi/Y2Ywv7tJ905ZlUzsLsV4ABuOqsCxNZg40ssY7o53M6A12DdslPkT JNCuhZIjoV96hISIxI31EOdoaIn6L9PfHchn88SbzDrfVS4reooj8S3BXzPs2AXU wZ9mVhYrBMgZlf0+IW6j2ukOd3baXLuYfU6ABUm/Smj5cOaqNZbJbHiptAqGv/YF 8L6Hao24iJB4AXmMSkalTrg+T6l5Hu2fezNkefDd9oR7IyJp3hn47n69RU399lvL qzTX6aMEhszsIPQSX0qEtq9DGDl0+6PiCMnS/3h048ULOXE4sW1Yyn2TjjvaFEGY ke3YiOR7bbM8iNiDjXzr5qvMS62MYHBWEhYIXWi/8ynyXXRiNC5DttA8FSYAAjKK 3tJ5IuNLzUruBc0hEcChf0Qp9zlG+54tQLow48ocbuZvg4zhQfdnpsKS4b1vdkIR hXwFZvJK8jdgAENjyHhFJLeVO+eaFGalpfnmElwMgTMQc9dCZO01I2fQvV3bVST8 U80MGv4oe263MqLgRrb1xdECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 372906820890302210745570529352316205293780 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 15:36:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 15:36:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pumenengo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 691120529803073609701942512944325511950791313196847086197011149736479844655446042376772134958837202020403386719006952273856273153367014987108128887403190973820774792181968602171141317699797308557961747235070736728950318885220860795949201385012334967470035174249659199563402680570952500582621289710765873066622497455982507086134063332023597947178428996039588308118042328516032287227866192873702130184206888893363223348270074822840603446999652965203568551610059378527700980898439705492953748420347847276354284756286407541242313116473376398649738926094962329577167373262995741154980907790754575783234125453936429742427449318374037623383784821750884055869170254760219957192974548998462600579384865443732153162769658542651996444586343058753808657698212492484216113099706318501760530553265808899312929883486071456584494999919999829357653750357942081004742510416343438322528563635045406901549261640107179132666363476769500702615855942023147898215660584467241209886130714915950432542536811433531457870055698493302127402442601018049625170680370815718423506968228129355159210285117260090043987997715410083741612693611644349500037526812555052652665158891105359251575619180087034904002322330507570486906517276575277826343360618084545568060065233 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5dbbfae08e380e80aa2810fefaa10158884853cb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pumenengo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e2e5fd48d0000040300483046022100ed3133d3b4b34c059b364efde5429a29ada3f8c70fb45bfc3e95c5c309e3f06b02210087b137b0d5a56b10c9917a19d6912919ba99dac75465a49ede373726a272e1bf00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e2e5fd4f50000040300473045022066c1bfb67d3d99fb64d24c4fcc194c2927f3c4a7379c2f8c9bb148ec70c1415b022100b44126cb749623d0c19dc1bc16b90ad94562e4621a2165b113e84d42c9abb398 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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