naturavita.com

Issued by R3

About this certificate

This digital certificate with serial number 03:7a:67:41:06:9c:c2:fd:6b:18:49:b8:65:b7:9a:25:f1:03 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=naturavita.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:67:41:06:9c:c2:fd:6b:18:49:b8:65:b7:9a:25:f1:03
Serial Number (int): 302988554676611281011122557508954945351939
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:03:fb:de:6f:16:20:de:29:75:31:91:74:bf:29:ad:37:64:cc:58
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4d:bc:f5:fb:04:fa:87:42:73:83:85:c0:87:a6:5b:ba:c4:c0:c8:d1
Fingerprint (sha256): b9:4c:65:da:5a:b8:d1:df:4d:a8:7a:4b:e4:03:fb:0c:b2:c6:1e:e7:91:ee:0d:5f:31:04:eb:8f:72:35:7a:ed

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate naturavita.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for naturavita.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

naturavita.com
www.naturavita.com

Other certificates including the domain name naturavita.com

(limited to 100 certificates)
allanblock.ae
estate.world
allanblock.ca
estate.world
orinda.work
generickamagra.org
hating.life
naturavita.com
namepard.avail.world
estate.world
hating.life
disneyland.world
namepard.sanus.world
disneyland.world
buybullion.org
naturavita.com
dominiospremium.ca
disneyland.world
naturavita.com
buybullion.org
calprivate.org
www.naturavita.com
radiator.cc
naturavita.com
avail.world
www.banh.org

Certificate

The complete raw certificate details for naturavita.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302988554676611281011122557508954945351939
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 05:10:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 05:10:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naturavita.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704788254390601337116203009694857213160559230639398109122466605201250407303600326503482159895323281714666030765325828837741849204995278808070286179995822732924680191695686651047487239220493531456846174351557804146785211561624628922368325550789171154058636357236089341401139958784780526747500627213233570471934994915510725201383542575501200630453541662960115435366136916090344440368515178992190536662769862387450263876466179734741074115366764196018752923853807051773940800424245700230408786033932746548706791902688347995909223447891686666619005988173928193441511117214383116516101523086475235167689977675554219562249728823236786410714450185797353196605035003678275458961604639646331886762156460786927876137216404954857788107369577903563830803775998203485465238322767467506760320897478500102857537842277292314372740583532797342593680358830826016186100224805087798366180295211732169796183838464225577511993122513970050251052373188374043309566284254819198196574273383764044156118310199604529631189096331170487241527719638535159660498532254972419825148083379113487539928857146409146191697829368534870498321324694139865112175493418767919135856900890864365509094800275308172060234140153102165230054190604799240687540845969290984396002450439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a03fbde6f1620de2975319174bf29ad3764cc58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturavita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturavita.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c5ca5f0d2000004030046304402201658ed7cddd9e96adb34014008a42fa50e91fb572c02b165abcf22ac128f8fbb02202fdd0e2f7e236b177d265166dcce4d0c0757866966947f354097f8864693ae7b007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c5ca5f0c50000040300473045022055725bad8b13a072414bcd72edcbb66e6b5588fdf4ae73581ad6484fb7845924022100bc21e52bbae2a8728bd432c3668cb6fae30e9321b7f2c8fdc79a3180f32e84fb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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