connectinghearts.one

Issued by R3

About this certificate

This digital certificate with serial number 04:f7:64:9e:87:12:b3:9e:0c:e9:3e:5f:57:d9:c8:7c:48:34 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=connectinghearts.one

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:f7:64:9e:87:12:b3:9e:0c:e9:3e:5f:57:d9:c8:7c:48:34
Serial Number (int): 432632634278601919458245583329655592339508
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:0f:61:e5:b7:ec:f7:36:20:d0:fd:36:13:26:fd:f7:6d:5d:a6:6c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 54:95:0a:7d:13:cb:a7:d4:eb:be:12:59:f3:1d:e6:e7:84:1c:18:6b
Fingerprint (sha256): b2:25:f2:6f:eb:ed:2a:b7:89:d8:e2:c4:12:6c:64:50:a3:cc:58:d3:3d:01:30:a6:ee:b1:8c:71:8e:89:f9:7c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate connectinghearts.one

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connectinghearts.one

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4917600.com
childshalloweencostume.com
connectinghearts.one
doctr.in
eastforkranch.com
hawaiian.cam
historypartner.com
homerglenil.com
howtocheckforbreastcancer.com
interviewquestions.info
pinocchio.com
showcoaching.com
usc.university

Other certificates including the domain name connectinghearts.one

(limited to 100 certificates)
connectinghearts.one
grocer.cc
grocer.cc
businesscredit.ninja
connectinghearts.one
ultimateloghome.ca
geothermal.world
grocer.cc
grocer.cc
grocer.cc
museumof.bible
connectinghearts.one
connectinghearts.one
museumof.bible
allanblock.asia
connectinghearts.one
impossible.ca
real.college
ultimateloghome.ca
grocer.cc
connectinghearts.one
www.avail.world
grocer.cc
ultimateloghome.ca
grocer.cc
connectinghearts.one
www.avail.world
connectinghearts.one
leaselock.ca
ultimateloghome.ca
ultimateloghome.ca
grocer.cc
connectinghearts.one
mobi.bike
connectinghearts.one
ultimateloghome.ca
grocer.cc
myautoloan.world
couples4christ.world
ultimateloghome.ca
connectinghearts.one
museumof.bible

Certificate

The complete raw certificate details for connectinghearts.one in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwER6BpNcsVnyHBtDsCXc
2JxVW5cWfbaAdfcEX/49iS2UWd7WATxnZcDUzery04/CbBR3qrlTIAym2VzrcKQp
rX/ZU5lM+FTMoVH+4LO3deT3MawIeahbqoUUMZTZAKXvFV4244IUfyGqap2EYG1c
Ix0xTjX0CIW1hqWqhH/K0sUUNMWow6r55IZicLUDbkqo7HNz/2N2bKVTnN2/lrel
NN4JVOtA5KP92Phl1lXyik6H9L0Zmhhu5VZ2Y1Rc2ugLNe5tlcj7sSlm8Wqimbl+
4zIjPIK0c0tXqroNhvaljPbKaMY5mZAAj9Jx6I/y1zAE4oIMY0ADaxK01JoZFXts
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432632634278601919458245583329655592339508
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 00:43:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-19 00:43:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connectinghearts.one'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24271521654444872844713666819536748942185174695224356042747952398505023888098358814156506304419586927663377696025205307179260245597774793189350555261640468288257616769192660020329415565637563193846250688569403955713003496628354435288786990229219533945089709761094467067268113926258452081697713343108231106941360300850799645049440945855558166517124615923564276164470587312540558883466102122812255750432653112551337449066650573598797240829592138708770827414388129745833187080303224123957687140681737717574694125174247525056295574145837378041823921992252429087583031331272684090323334935592232958581759505369993200757809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a60f61e5b7ecf73620d0fd361326fdf76d5da66c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (251 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4917600.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childshalloweencostume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectinghearts.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctr.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastforkranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiian.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historypartner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homerglenil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtocheckforbreastcancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interviewquestions.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinocchio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showcoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usc.university'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f98d1a6d500000403004830460221009b1d2b66715a476a8a2e94ca11a9d22dc42f2a67a603357d1c454a7051c40ad5022100b17db31c13f7ec08655d3f3c06d8456379ad18de63b3da9a11f5dbed9237753f007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f98d1a6d8000004030047304502200557566ff7ef8c6b941737a73939f8eebbab024a9c663c92fa7d8ada107338b6022100d9c983a495c7b0734269679da63655567f30449692c69dc4f208fe4df2542bd2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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