potenzmacher.info.woven.bible

Issued by R3

About this certificate

This digital certificate with serial number 04:95:f7:28:7b:4e:45:2b:f7:c4:17:22:a5:dd:01:59:28:cb was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=potenzmacher.info.woven.bible

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:95:f7:28:7b:4e:45:2b:f7:c4:17:22:a5:dd:01:59:28:cb
Serial Number (int): 399479745906031618801048542982241533896907
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ee:aa:4b:01:cc:a3:ed:fb:a2:39:8a:fc:88:98:1a:ae:45:7d:b4:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b3:67:9f:6d:58:17:38:94:da:f5:1c:54:4c:b4:04:3c:65:7b:97:3f
Fingerprint (sha256): ac:e7:48:b6:49:a3:01:31:96:b9:3e:44:c7:93:4b:62:0a:75:b0:d1:98:29:23:75:dc:36:dc:42:1f:04:16:43

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate potenzmacher.info.woven.bible

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for potenzmacher.info.woven.bible

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advertisingvan.com
augmentechs.com
belamix.com
cannesforvip.com
fieldstoneretainingwall.com
hempenthusiast.com
jenworth.com
potenzmacher.info.woven.bible
relinque.com
rxsugardog.com
saintlouisschooldistricts.com
strikingexpert.com.videoclipscreator.com
thundercheer.com.tigerpalacepoker.com
z-j.in

Other certificates including the domain name woven.bible

(limited to 100 certificates)
woven.bible
woven.bible
doktorapotheke24.de
woven.bible
woven.bible
potenzmacher.info.woven.bible
woven.bible
www.romanian.bible
woven.bible
clearword.bible

Certificate

The complete raw certificate details for potenzmacher.info.woven.bible in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxrJkZF9Vxs+KWSBPINk
DE5BSqF92cbsbvCiEMpuCq4hERRQ1lvZGh58hxgkS59p2zqz9Y+Ry7rNOk1oj9mD
xo7xBWYE2xNsWIA00zkG0EraLH6fCm98sErfpEpJzOZJCCxTTLqWiUTpeiiUNjYr
Za9o/GpNsDomRcf9MQCQTCXsZxWBG/pteJEXHBPxUp8QgAxjNxG7guN2v2Uj/Pk3
kjv0TfeYQoQJctTSA6JEH96g9giCFAe97R4JGzsxXFuXZf02dAle8gEP1ey6I9qx
sEh5YZPmho+7ig5dcDmu1V1tTw2iMWxlJIoJygxvp/iLltFAVQPiEKw9J7jY61Z0
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399479745906031618801048542982241533896907
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 10:40:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 10:40:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'potenzmacher.info.woven.bible'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23619772376790865605037163385550859665151072041659036757149372654725210930431934558504418266635342112481866275060877101353904722530322435769138552904621485114017464342030039900377947939433496596069823443424466878356969914874111239737662444745631374167812069703419007483711878463872295730531587548370835527686022778730066401262117431081308496474877924292606665058326786937005633082307372984545302258567771169468573876006780053755992849517794662919066407046820917941579099892820707654922414707751501046003369103365620094893363855398396461211641908548591839914636867818980262780257590296731459133688707402581157250233477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eeaa4b01cca3edfba2398afc88981aae457db455
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (316 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertisingvan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augmentechs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belamix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannesforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldstoneretainingwall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempenthusiast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potenzmacher.info.woven.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relinque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugardog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintlouisschooldistricts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strikingexpert.com.videoclipscreator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thundercheer.com.tigerpalacepoker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z-j.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c4413e944000004030047304502200f49d0fdc7758a47a5f19b9df7b303192b183edab14bb1160b2df244d4f117ef022100d35410255b0c71d40be4e98043469c05eab4eed9eb1571c385c77f1bfd19b54e00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c4413ea350000040300473045022100cc404e10809de7629e0850a8fb7acf31c248a86403060c8be10fa9c6b060de8c02206ab0c4a9283dab509263a92bd94d10e0853f2a29367ad527395f984f7aaa8c80
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008ff1c28e2f4b7a08640db687606f818ddf9c21d28d0fded667e86da5bbd4f61fb4f8626ca6d5447f3bd52988c9f919493a502b9be0c66ab1322157ae77f3ea119096ef7e544575ec4e158687b7524b1277e0398d141854067ae14d00a6de62394e69c8b5cff65cabd32ff6ca37e4f3764b3a1decaf6789a6a16a93633f879dfb729daec15f4657a73ed4bec97322f9d16c7ef9529c93c2d451a6f6c87a19c63d5257ec4d3a9bf9b7c06466dd2ae67027780335c3e2a3476950e45107dd9e9926c8a3798d4c2fdba767bc6dee76a4d553db8e04c8b1c38edbcfd04101fc8fa3d72acacfa0815e47e93897d98b5d9af9be5374f056605cce4566703440ecc70d7d