www.website-49efdc0a.startdots.net

Issued by R3

About this certificate

This digital certificate with serial number 03:9e:ea:a0:de:6f:d0:8a:99:92:36:42:b9:c2:c3:cf:b4:fd was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.website-49efdc0a.startdots.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:9e:ea:a0:de:6f:d0:8a:99:92:36:42:b9:c2:c3:cf:b4:fd
Serial Number (int): 315413346398853851542544270801119650755837
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:29:23:c7:40:b8:1a:f3:14:ab:79:da:bf:87:ef:74:f3:1d:37:42
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 66:9d:a8:ca:14:31:f9:dc:1b:9d:88:d2:9c:79:1d:bc:e7:07:4e:16
Fingerprint (sha256): b6:1c:41:f9:49:53:3a:d6:f0:a2:51:4d:a2:27:0b:e3:67:6f:8f:d4:a3:10:3b:ba:12:c6:09:42:35:ba:2c:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.website-49efdc0a.startdots.net

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.website-49efdc0a.startdots.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.startdots.net
*.test2.startdots.net
mail.tfj.ltm.temporary.site
startdots.net
tfj.ltm.temporary.site
www.tfj.ltm.temporary.site
www.website-49efdc0a.startdots.net
www.website-87106212.startdots.net
www.website-e6e63036.startdots.net

Other certificates including the domain name startdots.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.website-49efdc0a.startdots.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKGHtDy8rzUVTbE5GVfy
x6PJEYu3vrKx/ANTXjIWaBWecZPx2R7Xc4Xes5G0cYDFghhPWpvcl7JBZM13WJXq
AatO1pTm2Ina7fnq6zxkDTL3hiTf8XqUnbD2SKNXxHouZaL1pJ3Kv8omfrYCQNxA
2wH+7GEsxcZVGGM/aq0BlcaOnUou8K18imW8kNG2L4Mz2f//UurYkkv/7YeYFmdy
EogTz3rvVJFYKxx9DE7HXPDrL3aVyCFPXZ+Bw7hNslUoPPttghNXAIA3zksABKKK
5mEVJTWANB4k5x/UPb1QYYdwZPI7G+dMjkxNxFq/MuPB2N2wtIdKsl0heqDbdfWX
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315413346398853851542544270801119650755837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 10:35:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 10:35:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.website-49efdc0a.startdots.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25327314451264611787174179785387965872521920424550881021519825578957365605237268808460521252274249481203762913170637578473788778258124057203864153381711355558464423943822325101715796634774059471771840126592470614535541874841405489002894639360853664725362632329618832391350907158120097915127270466205068442055961655353895677520315136395709063933559838220806585083455050188763413688602010090071564969298358960562037312989200254691402878282521787428167071201897860614332066396862553141769250688562035168199999713187346905780953401269438054656059523757345094197106778270654087880067106343867026976129041961556309047613291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d2923c740b81af314ab79dabf87ef74f31d3742
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startdots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test2.startdots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tfj.ltm.temporary.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startdots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfj.ltm.temporary.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfj.ltm.temporary.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.website-49efdc0a.startdots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.website-87106212.startdots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.website-e6e63036.startdots.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018eb857cec00000040300483046022100aa2624c3d8e299768a01b0304c2b9449a0be1abdfa35f8ff262ab24f79369552022100e73740a44fd7edf6cf5eb09cfb31e9a09b22d8c5b0787253971075ecc854a4a60075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018eb857cec500000403004630440220278050da6b216abe804043e33e8fdee79cac9035b3a96d85c6d13b24ace5d8af02202099316da2ac6884bc61ff18f7e3ee77603f46e7ef704be367f7d13916f9a1ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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