smithtownchristmaslightsinstalled.com

Issued by R3

About this certificate

This digital certificate with serial number 03:3c:a6:df:18:8c:da:db:82:a0:7e:c2:47:3e:14:51:f1:03 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=smithtownchristmaslightsinstalled.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:3c:a6:df:18:8c:da:db:82:a0:7e:c2:47:3e:14:51:f1:03
Serial Number (int): 281975610037974303392538271258967100485891
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 98:47:f5:c7:a7:75:6c:94:8f:36:72:d1:bb:b2:05:50:d2:15:a8:c6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 57:a9:b0:8e:f0:ad:83:db:64:bf:c4:ad:91:96:f3:a3:c8:28:3f:d3
Fingerprint (sha256): b6:19:1c:47:72:6b:74:c3:f8:11:6b:4c:93:2a:1f:90:20:61:2a:f6:0e:54:e4:af:a3:ec:20:eb:05:a6:ef:6b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate smithtownchristmaslightsinstalled.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smithtownchristmaslightsinstalled.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

100history.com
airusacharters.com
albumclassifieds.com
alumion.com
atlanticsounds.net
blogrings.com
cobbwellnesscenter.com
england4vip.com
frk.co.in
sivakrishna.in
smithtownchristmaslightsinstalled.com
vacuumtruck.com

Other certificates including the domain name smithtownchristmaslightsinstalled.com

(limited to 100 certificates)
www.unctuous.com
vrgalactic.com
tuckedinn.com
npuco.com
outstandingcloud.com
mna.vc
smokeshowing.net.yf.co.za
carrolibre.com
carrolibre.com
fifthedge.com
sagaexchange.com
traintickets.co.za
loci.online
vrgalactic.com
smithtownchristmaslightsinstalled.com
hempmd.org
forexdistributedledger.com
summitparkbiblechurch.org
ssl-lvcck.epik.to
demonreddog.org
moar.tube
www.thatone.pl
demonreddog.org
www.bridescafe.com
adapthealth.org
hittinglab.com
smithtownchristmaslightsinstalled.com
turntableneedles.org
internationalhomeschoolday.org
arbitrage.vg
forexdistributedledger.com
www.thatone.pl
huntingtonchristmaslightingestimate.com
modalonmain.ca

Certificate

The complete raw certificate details for smithtownchristmaslightsinstalled.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jIOA10Cj/ReGnA5eAU1
ktie+n5Avz3CCw9tQL/Noq7kmFqBHJQn5v5RblG1rEI/ZMT6Epyb6UlP4ZCr/NeW
b0mKQ4dgz0Wn9VvKmNDfSWSI/dRz7Eb3kxTQ9lsJvN129nvzYzDbjZHHeVy1o6eJ
rE+kng8FyOOOKWPcMubzEnxUwR8u5BdzD6VFFhw1hG4Yw3mzysDwF6aawdeKBHEO
kHZDKXsjKYj8PUSONy4sywJzzJhuanMv/RBnoRCXd6BdEd4sshBsXlwsl8Sz0AlA
QKeEDlFJ+fK70PeunS4Dn9OGGF5OWb/JABB6zuQ8p6/UijQQgjR4DqSmw4bBIEN9
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281975610037974303392538271258967100485891
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 00:14:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-07 00:14:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smithtownchristmaslightsinstalled.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28049586614121968374205588517414268185467328268912016658448225401626034453111823393906620180967527976835529110166355587969343118612143134083845367704599790044236014948932932920654445776146970506722427491816161612798155643324341549935214888792272414682499941792718009486066484103468236200318459441689535125124961766079583793395734536665860016735673497180793300852804425670603960587702143441078218084522314083101360886347883146256199325839825164745023705592530077488887821155207572477238883444967610579222510482578758054522746920690582835650795104835490419238459473519764051021827581363734323771124286097955551820610931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9847f5c7a7756c948f3672d1bbb20550d215a8c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (233 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100history.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airusacharters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albumclassifieds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticsounds.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogrings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobbwellnesscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'england4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frk.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sivakrishna.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithtownchristmaslightsinstalled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacuumtruck.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f5aea18fc0000040300473045022100da437699036f3990532201ff74d747dd51ece75dd7396679206e245e28748dca02201786e3e4cfba85ada2577cc4791d2e4079810d2d68c45c11f7cd0ef153408b1d00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f5aea19510000040300463044022077245faaa592ed1fa78ac959428db5547c8a5a473969bb19ee9a79b3f299d2a6022021211e34a9fd986f22e9f8f262d9fc79f02bf8a0e129f6dacf9507a8a7fde5e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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