hayak.org

Issued by R3

About this certificate

This digital certificate with serial number 04:43:da:63:7a:69:1d:43:b1:7d:1d:8a:80:0f:f7:6f:21:22 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hayak.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:43:da:63:7a:69:1d:43:b1:7d:1d:8a:80:0f:f7:6f:21:22
Serial Number (int): 371538350533995955857753070654092169126178
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 60:e9:55:94:47:4d:8a:a4:4e:cd:b1:b6:fb:37:8c:33:23:a5:a0:6d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): de:55:ce:7a:53:21:4b:05:24:84:1e:64:fc:17:02:21:70:11:4f:15
Fingerprint (sha256): b0:8b:f4:d7:7a:09:e3:96:62:f0:6e:40:17:6f:bc:68:61:0f:cd:ec:5b:17:d4:3b:29:72:19:85:10:d2:47:82

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hayak.org

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hayak.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asicrep.com.fuugi.com
comupay.com
crocodisle.com
efficientsuv.com
hayak.org
ifits.net
indiantrailproperties.com
keyn.es
metabolicresponse.com
slaash.com.summit-asia.com
uberrock.com.swarmbox.net

Other certificates including the domain name hayak.org

(limited to 100 certificates)
dumptruck.ca
sportsbetting.nyc
dumptruck.ca
dumptruck.ca
olympia.ac
dumptruck.ca
azulprofundo.yoga
olympia.ac
hayak.org
stemhigh.org
real.world
dumptruck.ca
cubensismushroomshop.com.hayak.org
musicbingo.ca
dumptruck.ca
hayak.org
sportsbetting.nyc
hayak.org
dumptruck.ca
proassislife.com.ec.proassislife.com.ec
dumptruck.ca
isupportlife.org.hayak.org
sapiens.sapia.pe
www.igotaborrowsome.com
ypp.co.za
omeiapad.world
satools.co.za
dumptruck.ca
www.joeybrackets.com
sportsbetting.nyc
hayak.org
hayak.org
www.caldwellplumber.com
hayak.org
dumptruck.ca
sportsbetting.nyc
hayak.org
olympia.ac
omeiapad.world
sportsbetting.nyc
proassislife.com.ec.proassislife.com.ec
dumptruck.ca
covid19.org

Certificate

The complete raw certificate details for hayak.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgISBEPaY3ppHUOxfR2KgA/3byEiMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMDUwMTUyMDJaFw0yNDA0MDQwMTUyMDFaMBQxEjAQBgNVBAMT
CWhheWFrLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJwDBPlY
E2dR5AsCRTFAkuMm/XEdam8geErBJJ9syDWaBK5SpAaMROHO0zOeNIvHoONg5p14
FdAEne9J1AUzIzrFHEJNllGZ4iTlBaE6FQ5z8c2kdhkc1Y/K1OulbWj7+gvtSy1n
nD8ydQkiS1ZKeE3Pzpr5MiZUxjcrWN8dS7pqTulwVi08sDUcJ1whjKZTVFjqygjM
GFy+UMYJ40CxQWMPTToexqR29HUh77BH4xxHb2yDLWYM8UYqEMlduHnvYb4Mgumf
Z9oEpPVhZr2ioTAGu2ZHuHkVhJx81VJNOmmosx8GutoAkb/E3wQXHpkSJKTHLQ32
07WhJcfcNcFDvCcCAwEAAaOCAtIwggLOMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
YOlVlEdNiqROzbG2+zeMMyOloG0wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v
nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s
ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wgdkG
A1UdEQSB0TCBzoIVYXNpY3JlcC5jb20uZnV1Z2kuY29tggtjb211cGF5LmNvbYIO
Y3JvY29kaXNsZS5jb22CEGVmZmljaWVudHN1di5jb22CCWhheWFrLm9yZ4IJaWZp
dHMubmV0ghlpbmRpYW50cmFpbHByb3BlcnRpZXMuY29tggdrZXluLmVzghVtZXRh
Ym9saWNyZXNwb25zZS5jb22CGnNsYWFzaC5jb20uc3VtbWl0LWFzaWEuY29tghl1
YmVycm9jay5jb20uc3dhcm1ib3gubmV0MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB
BQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB
2bu/qznYhHMAAAGM14joNwAABAMASDBGAiEAi1RoYHMYb6kFLdyxC9BjYMnj5L8h
R/H16keCoNASZ9sCIQCkQARws17ezHlC1URDMuHVHlEfi0WXsh6ir0B2vhsr5gB2
AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjNeI6IwAAAQDAEcw
RQIhAP7bp95jW8kfwMcSNYSaAwFyY2jag3LeoBonvHzk+pUGAiAdFxg8M+2cIQvA
gIwbXY/K2l8ztM6SuQno6Nw95hsdnDANBgkqhkiG9w0BAQsFAAOCAQEAVLrQEdzM
1elmjEiHHFsQLq8WngKx65RNDBx9pfTI9hmiICGlsfeyK4iYeD79Y9cT+15ezlvO
V3aL2mYUDY+D2f7Eb5iJDmvjRI2+uIIX2h657o28OJYZ3KX2fn2105FGeF5642Aj
8A5JqluvgT3AOOkr7jY62IkDYI4rmYAgmyBiNdvN2fM8MQu4kGCsjYpxwuK0YaKo
/tRscuctj85u/HNFw4lvaaP2PcoufYB06DFp4RKLZE8aY2VMaSrOLJTjNJAIEZ/N
Nt9hrgk9cybbLXjHJN6HQCv+/t2RyeVppAFXFMArN33FwTrw0L+AWS/WY++jYgYd
PRNIJPauODxZwQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAME+VgTZ1HkCwJFMUCS
4yb9cR1qbyB4SsEkn2zINZoErlKkBoxE4c7TM540i8eg42DmnXgV0ASd70nUBTMj
OsUcQk2WUZniJOUFoToVDnPxzaR2GRzVj8rU66VtaPv6C+1LLWecPzJ1CSJLVkp4
Tc/OmvkyJlTGNytY3x1LumpO6XBWLTywNRwnXCGMplNUWOrKCMwYXL5QxgnjQLFB
Yw9NOh7GpHb0dSHvsEfjHEdvbIMtZgzxRioQyV24ee9hvgyC6Z9n2gSk9WFmvaKh
MAa7Zke4eRWEnHzVUk06aaizHwa62gCRv8TfBBcemRIkpMctDfbTtaElx9w1wUO8
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371538350533995955857753070654092169126178
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 01:52:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 01:52:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hayak.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19694664510977812841102024104937835273444684170673511696623682896527298683600362132062302485939430097464276366895833405273063035148863428967837725903737483540790406082626627643163180891617658584107008985667852570019859044618645507395748543672803859242705499912048748024597677030646206228939670197839540897264445305220555907695465821065451770494936022372048198598377584003362315258501089302588510139493071698771361012726245654167130380761980203689532714788747818247638669701325314569938525834456484603956014352004851631885883634668532190177765675893822298840283616953412759344017754977941733095607404743185320170994727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60e95594474d8aa44ecdb1b6fb378c3323a5a06d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (209 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asicrep.com.fuugi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comupay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crocodisle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efficientsuv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hayak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifits.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiantrailproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyn.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabolicresponse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slaash.com.summit-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uberrock.com.swarmbox.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cd788e83700000403004830460221008b54686073186fa9052ddcb10bd06360c9e3e4bf2147f1f5ea4782a0d01267db022100a4400470b35edecc7942d5444332e1d51e511f8b4597b21ea2af4076be1b2be600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cd788e88c0000040300473045022100fedba7de635bc91fc0c71235849a0301726368da8372dea01a27bc7ce4fa950602201d17183c33ed9c210bc0808c1b5d8fcada5f33b4ce92b909e8e8dc3de61b1d9c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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