mybiznez.app
Issued by R3
About this certificate
This digital certificate with serial number 04:a1:8a:18:7d:b1:2c:80:d7:88:08:10:59:b2:50:45:46:ea was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=mybiznez.app
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:a1:8a:18:7d:b1:2c:80:d7:88:08:10:59:b2:50:45:46:eaSerial Number (int): 403418165429193360752661492589870398654186
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 17:91:cc:05:61:29:c0:11:d5:a8:4c:3d:34:5b:49:b8:ee:9e:fa:95
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 3c:40:68:8e:3a:9c:9a:6a:0c:51:b4:36:ea:21:83:12:76:74:ac:bc
Fingerprint (sha256): a9:f5:c9:0e:f8:bc:7e:db:f5:9a:6c:7d:95:cb:ad:03:f3:86:dc:27:db:a3:6d:e7:cd:bb:fe:4a:fc:e3:32:3a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate mybiznez.app
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mybiznez.app
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mybiznez.app
www.mybiznez.app
www.mybiznez.app
Other certificates including the domain name mybiznez.app
(limited to 100 certificates)
staging.painel.appjusto.com.br
flexicon.space
mybiznez.app
crystal-creations.de
tatsnack.com
bene-regalo.com
startup-iq.com
www.teamos.co
karthikkondri.com
www.skolastik.cz
admin.mybiznez.app
pro.link-dev.sikkaapp.in
ascii.tools.stamm.me
rr.zso8.krakow.pl
kawena.xyz
aaronnervs.com
customlifestyle.co.za
verena-tudyka.de
usuarios.mybiznez.app
wellnessapp.simpayx.com
portal.sistemaisgo.com
foodway.me
mybiznez.app
www.melzo.com
www.godba.org
examainer.audeering.com
amana.ai
firebase.hashclients.com
techheralds.in
gne.groupama.speakylink.com
tv.socolive77.com
preprod.aragsmartcontractsparticulares.com
screenshotapi.dev
acgrindingcorp.com
www.mybiznez.app
tibi.host
luna.loopbin.dev
dev.inkdrop.ai
www.good-cti.com
bethadamsartist.com
thatgame.site
keplercube.com
dev.ticketzone.co.ke
emailings.x-28.com
mybiznez.app
demo-client.civitimeapp.com
www.puertolimonradio.com
www.marceloneppel.dev
negocios.mybiznez.app
www.mybiznez.app
customlifestyle.co.za
account.cogs.show
admin.mybiznez.app
www.kulture.com
qrgo.be
demo-client.civitimeapp.com
demo.medconference.com.br
dev.seak-global.safe-console.seakglobal.com
use.kintimer.app
webapp-deprecated-uat.shapr.net
legacypets.app
iyana.estore.business
mybiznez.app
jamesward.com
monoe.co
www.cashierr.nl
emailings.x-28.com
referidos.mybiznez.app
www.lonewolfcode.com
bjerkell.com
spectreservices.uk
www.rogerdavila.com
www.getzinch.com
gne.groupama.speakylink.com
www.mybiznez.app
flexicon.space
mybiznez.app
crystal-creations.de
tatsnack.com
bene-regalo.com
startup-iq.com
www.teamos.co
karthikkondri.com
www.skolastik.cz
admin.mybiznez.app
pro.link-dev.sikkaapp.in
ascii.tools.stamm.me
rr.zso8.krakow.pl
kawena.xyz
aaronnervs.com
customlifestyle.co.za
verena-tudyka.de
usuarios.mybiznez.app
wellnessapp.simpayx.com
portal.sistemaisgo.com
foodway.me
mybiznez.app
www.melzo.com
www.godba.org
examainer.audeering.com
amana.ai
firebase.hashclients.com
techheralds.in
gne.groupama.speakylink.com
tv.socolive77.com
preprod.aragsmartcontractsparticulares.com
screenshotapi.dev
acgrindingcorp.com
www.mybiznez.app
tibi.host
luna.loopbin.dev
dev.inkdrop.ai
www.good-cti.com
bethadamsartist.com
thatgame.site
keplercube.com
dev.ticketzone.co.ke
emailings.x-28.com
mybiznez.app
demo-client.civitimeapp.com
www.puertolimonradio.com
www.marceloneppel.dev
negocios.mybiznez.app
www.mybiznez.app
customlifestyle.co.za
account.cogs.show
admin.mybiznez.app
www.kulture.com
qrgo.be
demo-client.civitimeapp.com
demo.medconference.com.br
dev.seak-global.safe-console.seakglobal.com
use.kintimer.app
webapp-deprecated-uat.shapr.net
legacypets.app
iyana.estore.business
mybiznez.app
jamesward.com
monoe.co
www.cashierr.nl
emailings.x-28.com
referidos.mybiznez.app
www.lonewolfcode.com
bjerkell.com
spectreservices.uk
www.rogerdavila.com
www.getzinch.com
gne.groupama.speakylink.com
www.mybiznez.app
Certificate
The complete raw certificate details for mybiznez.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISBKGKGH2xLIDXiAgQWbJQRUbqMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMTMxNzM0MTNaFw0yNDA1MTMxNzM0MTJaMBcxFTATBgNVBAMT DG15Yml6bmV6LmFwcDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgr hJI1ljWjUfixbG5izRgMpR7H9bQTX8ws1h8IReYtG9MrYDbz9nK6NgoEQDHzCl8p UHC4a2Fjt4lAH2N1YEqsN8xUGs21gfJHkUR+ou3PxIkV6KBym/WExD2LDzD8B4Th I1nx1NmS5O46HXn9klbdwFarO6xJgbz4sEnrQzMMQfFQdU6WK37Z/FkakPY1/BB1 UayglYDGDcxVFrSTjNaK46AE/vMeH8DbNdPAlgtSJ+h0IuAuVla5AzE40naLgKU2 afWU98jSJ1CW7PtHWn9pTCl6FTOBQfziE1ZokePPe5gwROS5RAlaD7DPYpzl3WHT toBDx7mtqYUzqVmjn5MCAwEAAaOCAiEwggIdMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUF5HMBWEpwBHVqEw9NFtJuO6e+pUwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w KQYDVR0RBCIwIIIMbXliaXpuZXouYXBwghB3d3cubXliaXpuZXouYXBwMBMGA1Ud IAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAdv+IPwq2 +5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGNo7+D1QAABAMASDBGAiEAgIk6 2uSpPgzX/xby2BBS+4sQEfkB2h8CYK+TiBpvTUgCIQC26xSD4UqOGMGL4tV+Vd/2 UapsZqybJmdutwv2+nklQAB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5 2IRzAAABjaO/hXoAAAQDAEcwRQIhAMPN+Oey4oKseZhl6wlCCMQgumVUU2yrxn5S X0zo80XpAiBt7/BA+kQ4CE9z9/lV1kNCHIjltd7S8XEj9fbmr/mbIjANBgkqhkiG 9w0BAQsFAAOCAQEAcCHa31kexdLq2VDh7xzbK+iUL80IhT/Fj91vXSNWa9DK6idX kePxCvBHDE3qRmtfwDBX6Yah+vnBmncvsYim5mQDtqCC563BVwAUoJBQp81sAn3T S+KrDM7jmTMwH5acDqkG2bnvx09E0rM8SMYRh8RqR6Dr1eguH55Ix6R6r1IsXRw2 1UmH/OcZF9uGPVy9chEQulF8zjgs/ILFcjMbQwStfMmAjjgn8FbHCIf2nGHhqkfa rlktmbeq+OnKjmapDVUyEXcHTp8nYQdO0++3iVxWZVY+WDdP15zFvbCC1zbMt8K9 b+DtP66Fu3BbxVe/KZQEuSXyYo5tPWAkcdiXmA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCuEkjWWNaNR+LFsbmLN GAylHsf1tBNfzCzWHwhF5i0b0ytgNvP2cro2CgRAMfMKXylQcLhrYWO3iUAfY3Vg Sqw3zFQazbWB8keRRH6i7c/EiRXooHKb9YTEPYsPMPwHhOEjWfHU2ZLk7jodef2S Vt3AVqs7rEmBvPiwSetDMwxB8VB1TpYrftn8WRqQ9jX8EHVRrKCVgMYNzFUWtJOM 1orjoAT+8x4fwNs108CWC1In6HQi4C5WVrkDMTjSdouApTZp9ZT3yNInUJbs+0da f2lMKXoVM4FB/OITVmiR4897mDBE5LlECVoPsM9inOXdYdO2gEPHua2phTOpWaOf kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 403418165429193360752661492589870398654186 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 17:34:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 17:34:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mybiznez.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25269120447798918412676526724114146172881433059824313730184472317050346431443054075322722588107451653538613194512167817953159249143868019449504476491615321654157838174070124232391170128330766102358615050826132250461612144053120629719514197484029435518129433110732769043359659031331200070009644461605297680326484051442990732834010427122486830388711157724495165719369517235899087323796956785519114082254341633327026984059700499069650198616536795429997768918013794304461573945043039661030310711666645987780925340297440787727403671446827201470143497728791147409403308846275688134305492002210385830196889186462625937203091 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1791cc056129c011d5a84c3d345b49b8ee9efa95 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybiznez.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybiznez.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018da3bf83d5000004030048304602210080893adae4a93e0cd7ff16f2d81052fb8b1011f901da1f0260af93881a6f4d48022100b6eb1483e14a8e18c18be2d57e55dff651aa6c66ac9b26676eb70bf6fa79254000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018da3bf857a0000040300473045022100c3cdf8e7b2e282ac799865eb094208c420ba6554536cabc67e525f4ce8f345e902206deff040fa4438084f73f7f955d643421c88e5b5ded2f17123f5f6e6aff99b22 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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