offshoulder.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d1:81:e6:ce:15:57:97:06:77:43:3f:8c:d2:79:7e:28:4d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=offshoulder.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:81:e6:ce:15:57:97:06:77:43:3f:8c:d2:79:7e:28:4d
Serial Number (int): 332628541301357873500907229026901043325005
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:54:83:e3:18:50:69:80:f9:0c:4e:d9:c6:a1:ed:f6:9a:13:0a:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 29:42:23:6e:bb:47:6e:15:d2:71:f7:c5:58:aa:4c:3d:ff:15:b8:9d
Fingerprint (sha256): b2:d7:64:49:65:dc:57:ed:41:d7:17:37:49:d0:16:13:ee:ee:b8:32:f8:c3:40:7f:1f:3f:c5:2f:09:e1:5b:02

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate offshoulder.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for offshoulder.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

offshoulder.com

Other certificates including the domain name offshoulder.com

(limited to 100 certificates)
dirttrader.com
www.printlogics.com
www.legitweedsites.com
www.ligexnet.com
www.action-painting.com
artsmed.com
cbgseed.org
neomunderground.com
tangiblegoods.com
www.dw-i.com
www.miniforexaccount.com
blockchainoftransportation.com
www.offshoulder.com
www.arkansasduilawfirm.com
neosciences.com
zsico.com
offshoulder.com
tibiabet.com
www.greenbaysportsdoctor.com
www.arkansasduilawfirm.com
bobbi-billard.com
www.noidcasino.com
www.offshoulder.com
www.efforte.com

Certificate

The complete raw certificate details for offshoulder.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332628541301357873500907229026901043325005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 02:45:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 02:45:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'offshoulder.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 687428146127664015762331317082244240564675884936045006458615776527272978752140435047879529274749000290874415420344356666118403058910772363297764093124860401931281732676287971986069178522526723090515132556421585386987773065882596362796132038698248030030640804943751884760175667442452439893655730988619234330727295825337310584914649005873626104524779401335960555602988390623727450552833587466110385423861792832712199241038942013998839374488297358653936235051236957163606413178379912009016548107811040795988817705684916491584506591417660113362572630035401134859457847148248384974969921104932612061091787924548604421882603799676432402213911540774394879956924341048854045999391362327412775755763050360492361983364587610982951594067081663401194048264940931041142392913347915890994137759263436773536964784828620798230380086302004818251012991854747368951627926383382437467133142214480438750017361812474898443851494622869968797320327546302044589482876981661397018353019336785699626010431881192066332261760870837416655269064584122906212200077062918880672380880819079550885663368042227476194496188489250360346003243714882876584210570236669427489696354018214055395963861399258376499721601764627646817601048009730646600955144658787348125203093499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a25483e318506980f90c4ed9c6a1edf69a130af0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoulder.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e59f730790000040300473045022100b7d0d0cd436eb4e77019ca0fff154a5c130c118a65ec533fa458bfe43cd8971a02200d387f8fcb2cb8268e4d255c8f03e75bc8ece991cdcadae4959ededb7ee0969000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e59f730c100000403004730450220777433a3ee3d5deeb3c540db9664100fd5204eebb1b599d2b4414d14d153aaa3022100c26cb19190710acc9c114cfc43765c33d92e00891a596b2f6bf4b5f809e048fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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