ainadia.com

Issued by R3

About this certificate

This digital certificate with serial number 04:63:2f:ca:a5:9c:4e:55:7a:05:47:96:a1:eb:1d:c0:8d:62 was issued on by Let's Encrypt.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ainadia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:63:2f:ca:a5:9c:4e:55:7a:05:47:96:a1:eb:1d:c0:8d:62
Serial Number (int): 382200623970962630671014818131616733367650
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 31:f0:7a:50:b6:72:c8:97:c5:67:79:1f:d4:f8:3f:95:cc:0c:c6:84
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3e:3f:79:5c:47:28:80:69:74:dc:fd:71:db:b4:a9:cc:0a:de:66:3b
Fingerprint (sha256): aa:9f:fa:64:f4:26:c3:dd:3e:fd:e8:bb:fb:47:a8:7e:5c:cf:0c:aa:9a:56:66:98:45:02:40:07:99:62:e2:4c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ainadia.com

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ainadia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ainadia.com
amzxn.com
btiproducts.com
corpuschristicommercialappraisals.com
electrofreedom.com
grandstrandtubresurfacing.com
greatrollup.com
gwaliordentist.in
helpyoulive.com
hoverboard.co.in
in12seconds.com
kanuschule.com
lakaso.com
marshvillerealtor.com
netmaxi.com
ohattorney.com
paintandshoot.com
philandsharri.com
rarecollectibleplates.com
rgj.co.in
rkj.co.in
stopspamdead.com
teambuoy.com
thebloodsugarindex.com
thegentlesoul.com
tripped.com
volinia.com
www.freedomforschool.com
www.rbristolloans.com
wxto.com
xlaurenstephens.com

Other certificates including the domain name ainadia.com

(limited to 100 certificates)
earthcorpfoundation.org.vc
panzer.finance
bastiatinstitute.org
thegreenafrica.org
variant.vc
shipwrecks.site
livingwater.bible
ainadia.com
ainadia.com
tgirlcanada.ca
earthcorpfoundation.org.vc
fortworthmom.blog

Certificate

The complete raw certificate details for ainadia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLgyRXizfYaCArghobwV
OdvBmd6k9PwBwpyWRCHseKD0LnnAyzIpqGnM0mZzqzWgGyU2bB/VBkPPm+r26Q0k
YwSGJYtKMBZ++5Byr8Uflz7Bjb3ZX4jdIG/AQQZL/P3MFMVCAYExJig5U7OCxlhp
/D5wEMnxZPRLnH440CYNqzFyO8NzK7e0YVDa2SZf8OWQDpwjY2iebUgApIN93Wey
/IcI5A/MHeOMaeBW7JoS5HZIChrCxB23CfQctlJAd0n/XTzOFphoGD/6TW2qJkZD
Jge9ArtmTd0Rx4XEXolW0jLoLUmz1jXSFbXaHXbHBB0Q7Eguc764zlGRBMzxorRi
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382200623970962630671014818131616733367650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 11:47:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 11:47:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ainadia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18774099751584913688166095163873953364379256518220902643362473109093023540202169155620999072696265628279696399693905531681240988817306424046032835687945574665446415602340154854662665070411892479429684058617840510033856450127541844413128303710460203943626290294831968937305618669831054456502860382806565129257767356689843012812623827212756290197858553047836108690790514266630398131452881705204125640353381879705937500375870274570535760097651866271399879276065142196727733278876284325467577531637074936267688320192999442934383908462926844661116711852732979085104452671496936172161137638444934146396239267247454000800461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31f07a50b672c897c567791fd4f83f95cc0cc684
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (571 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ainadia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amzxn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btiproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpuschristicommercialappraisals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electrofreedom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandstrandtubresurfacing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatrollup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwaliordentist.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpyoulive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoverboard.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in12seconds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanuschule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakaso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marshvillerealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netmaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paintandshoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philandsharri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rarecollectibleplates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rkj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopspamdead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teambuoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebloodsugarindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegentlesoul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripped.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volinia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedomforschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbristolloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wxto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlaurenstephens.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e6b5a853e000004030046304402204682e11a760abc415ed27b967e49f6805b52556d99d483e397abb118a956f178022048ae802f5ea60c7b2b07add55513a0027e937217873d560a1404726ecf42c583007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e6b5a8d1a0000040300463044022035ca25e84e9a903f44f6a07d56260bb11e35e192f07af8db431746d5da01a09a022075b519e88d53d1291df25507a65edb492d73021f4ab7345f78d99f107aa5e82f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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