primedomain.net

Issued by R3

About this certificate

This digital certificate with serial number 04:5f:61:c7:83:d4:48:9a:0e:f0:64:46:5f:2c:e4:51:f2:58 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=primedomain.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5f:61:c7:83:d4:48:9a:0e:f0:64:46:5f:2c:e4:51:f2:58
Serial Number (int): 380905939641010623583109730079691563463256
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 76:b7:cd:ec:0c:19:78:31:90:93:d0:0f:a1:26:a9:d5:11:ef:a3:ff
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): eb:d6:48:fc:85:72:03:b8:8c:9d:1c:2e:3f:3c:b8:8d:c3:40:69:c6
Fingerprint (sha256): b6:2e:15:5d:3d:75:3b:ca:95:cf:47:8f:fd:30:46:13:22:32:a7:29:98:b9:9e:59:0d:dd:f6:76:c9:ab:2c:3e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate primedomain.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for primedomain.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.primedomain.net
primedomain.net

Other certificates including the domain name primedomain.net

(limited to 100 certificates)
primedomain.net
help.wardhelp.co.za
support.carfilmapp.com
primedomain.net
primedomain.net
primedomain.net
support.primedomain.net
support.carfilmapp.com
support.carfilmapp.com
support.carfilmapp.com
primedomain.net
primedomain.net
primedomain.net
primedomain.net
support.carfilmapp.com
primedomain.net
support.carfilmapp.com
primedomain.net
primedomain.net
support.carfilmapp.com
bba.primedomain.net
primedomain.net
bba.primedomain.net
primedomain.net
support.carfilmapp.com

Certificate

The complete raw certificate details for primedomain.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDNPZvi9Sm8YOQlnYjcN
wXE93VLgyL3DkfDxvQSHdevfS9Lz3vHV+cLr0t9W0U+sP/ym7/lmXX488V/vZOun
GPTQrmHOj4OJfCqJJrheJyubv2ED8RR1+hPze7Nd73qiFdEQRNGtcGqZBdgqYcQC
fyrHg/KAccPiRj8fF+v7h0RClApAV/C14fjRFM/hlhPpIMOy1q6VEb/gVCg4sDBb
q9Uk0HLNBD1NgtrIiATtRqvztN1u2whyydsUElvYBOrgqf93Me/SMN4wwU7PWIse
lV+aumXNxs9fgQSNkjPrj/SE72Gs8vTqvt5/L9ZCulSerGWcE3Hx2JXoSqtP1UTS
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380905939641010623583109730079691563463256
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 21:19:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 21:19:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'primedomain.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22748196879256405000727115301303935909673846272412503602235994486911132376225638271350461480913360389919815992772727729198342577745987341998634459572856082818816057890884666798014871736583912454329755256436742530094337752670399145700221751527753267096277753062878992924716769773886148861822613423690926020155139883113121773759230932532183766490894418147124531574717726435641897853874481705152221709280106205833065468319901231149343365813663922166993944429338225143295375626158177962008028490283224616617594780468625513203341284154890475309247845381533566100640389993639357368129908682477661342671580774872645066085097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76b7cdec0c1978319093d00fa126a9d511efa3ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primedomain.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primedomain.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b6e11e86b00000403004830460221009b0c31fae759bcd2fa7552abe5e7e88688dc4d9a4aafcca60674c0736ed4816b0221009b7fb0693701c3d0227d14cbd4ad3a14f68e28c768d72a77028b7119bd06ddc900750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b6e11e89d00000403004630440220498ab6832305a4d520af885f9963dc6b130d98d36a5332aa2a1de0e8b5d978ae02205cea254f21e3c3adb6b8a765ecbc93aa0eab433a85dad9877059b37248fab83b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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