itextspeed.com
Issued by R3
About this certificate
This digital certificate with serial number 04:b0:60:2c:32:3a:86:24:5b:7c:3e:c7:f8:e9:95:d3:12:ef was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=itextspeed.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:b0:60:2c:32:3a:86:24:5b:7c:3e:c7:f8:e9:95:d3:12:efSerial Number (int): 408466675672540512165347638945705316520687
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 8f:01:5d:79:fe:b7:71:7a:17:fb:92:da:a7:f0:ef:f4:73:ae:d1:67
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): f3:da:34:bc:84:f7:e8:81:e4:be:28:5e:96:2c:0c:f2:f9:d5:e9:e6
Fingerprint (sha256): b9:c2:e3:7d:c4:7c:6f:aa:6f:d4:79:ed:16:09:2c:33:d4:18:31:c6:f5:d3:2d:f1:35:d3:b9:93:12:20:2b:97
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate itextspeed.com
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for itextspeed.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cannabisextractionoil.com
dickenscounty.com
itextspeed.com
khg.co.in
last-wishes-and-legacy.com
switzart.com
taxblogs.com
technologyhalloffame.com
tishomingocounty.com
u-x.in
watermarkfarm.info
whitbyontariohomesforsale.com
dickenscounty.com
itextspeed.com
khg.co.in
last-wishes-and-legacy.com
switzart.com
taxblogs.com
technologyhalloffame.com
tishomingocounty.com
u-x.in
watermarkfarm.info
whitbyontariohomesforsale.com
Other certificates including the domain name itextspeed.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for itextspeed.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISBLBgLDI6hiRbfD7H+OmV0xLvMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjcwODA1MzBaFw0yNDA3MjYwODA1MjlaMBkxFzAVBgNVBAMT Dml0ZXh0c3BlZWQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA xxlzlVe5In7nCwRmdo+uU94SeDtV21rNicfb4n04fmV0HHbEH/3JTO97Lc6aEptz AbjPMsz28cEyCchDncqUVqiz1hKM4pDNiAbhzMTunfnyWOcuyS/S6nLU6+Rclayb PvSOocJaBtrDxfigLNx43jAANTyYu2aTzFSNtfZ2aWagxMO+w2/VS6oEqWmDI7e1 zUgaDUdEYXYvX5pQNCcUM3NYK2vhatLJ9tJx/+BQSDE//bEvS8aBSPoWxO4fWSOG cW9Yn3C+lfdW40/Aj4jQwaevowpg+JpKcbXEZrXMuSFktqugeXv58J/bkap1xLvM uYDJMqcEu6IpLLjIeuthTQIDAQABo4IC7zCCAuswDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBSPAV15/rdxehf7ktqn8O/0c67RZzAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzCB9wYDVR0RBIHvMIHsghljYW5uYWJpc2V4dHJhY3Rpb25vaWwuY29tghFkaWNr ZW5zY291bnR5LmNvbYIOaXRleHRzcGVlZC5jb22CCWtoZy5jby5pboIabGFzdC13 aXNoZXMtYW5kLWxlZ2FjeS5jb22CDHN3aXR6YXJ0LmNvbYIMdGF4YmxvZ3MuY29t ghh0ZWNobm9sb2d5aGFsbG9mZmFtZS5jb22CFHRpc2hvbWluZ29jb3VudHkuY29t ggZ1LXguaW6CEndhdGVybWFya2Zhcm0uaW5mb4Idd2hpdGJ5b250YXJpb2hvbWVz Zm9yc2FsZS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdgA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAY8e zW0tAAAEAwBHMEUCIQD2g9PgrDWxAUApUcYcK6495Qjk0quq0iUVoHzlyqTKawIg Psgk2W9xoG8wTBL2XJvR9EIPTUQoxZgrJRTh4GgytBkAdgBIsONr2qZHNA/lagL6 nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY8ezW0uAAAEAwBHMEUCIEYhS8NenmIR6l7r yV4ue8XXH+yiCr9R0QxjRJKn8gHUAiEAzF+iXnYd+sZXxuJONLPA7W0G7gguHI1o 5YO6VU7p4u4wDQYJKoZIhvcNAQELBQADggEBAJ/Bag6EH/LJik+6Cysd7nedF12m 9ZhnU6tJCkkri+Tbh9wP5R3bSoBbg+t8Lyjl3rY3W8fPNWILkKmJFsOs7mIgQQUF WJl8ipWUV30cII5UYTwfYxzklsPOSo5KkzxTnNcNQJM9ez46Hg1wsBuRI6AJQius v6wgbiQhbv5oQuRyqxdy5ZEMxYG4A/dtLTPXjr5OOyhuJPLMXxZqc17NFDUC8ERs XWSp+pFfCy184iq2fkBVhScCneTcDhcylntm7icItwambtQN9P/QIDA6X1SbBSBe CVTnnahhz+cw/JyDCncLa7l9A20kVIZEPFQPpqx6JjIQ5KeDfuHwBL9n2yQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxlzlVe5In7nCwRmdo+u U94SeDtV21rNicfb4n04fmV0HHbEH/3JTO97Lc6aEptzAbjPMsz28cEyCchDncqU Vqiz1hKM4pDNiAbhzMTunfnyWOcuyS/S6nLU6+RclaybPvSOocJaBtrDxfigLNx4 3jAANTyYu2aTzFSNtfZ2aWagxMO+w2/VS6oEqWmDI7e1zUgaDUdEYXYvX5pQNCcU M3NYK2vhatLJ9tJx/+BQSDE//bEvS8aBSPoWxO4fWSOGcW9Yn3C+lfdW40/Aj4jQ waevowpg+JpKcbXEZrXMuSFktqugeXv58J/bkap1xLvMuYDJMqcEu6IpLLjIeuth TQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 408466675672540512165347638945705316520687 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 08:05:30 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 08:05:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itextspeed.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25133973289449104157904569198347074983449430203762048846267050155455043773235381209811777233134872622333890541711836774142662561108247110874306666118829955120168324215316071987355851555835010671053092513874890242195616807644015027980671952834663869028320760452435447648863963913068344435361231398997768836582426391676054744490609383538502033851244793270405066548162747816661522619412881073703238420596849456023870857513657901659151716440585416884468172412425191849331072045943853733617791958567360960449873302097376921537555731872497594852235307579705124625446357777746151287109805226207892877924422443810293665194317 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8f015d79feb7717a17fb92daa7f0eff473aed167 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (239 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisextractionoil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dickenscounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itextspeed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khg.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'last-wishes-and-legacy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switzart.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxblogs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technologyhalloffame.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tishomingocounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u-x.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watermarkfarm.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitbyontariohomesforsale.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f1ecd6d2d0000040300473045022100f683d3e0ac35b101402951c61c2bae3de508e4d2abaad22515a07ce5caa4ca6b02203ec824d96f71a06f304c12f65c9bd1f4420f4d4428c5982b2514e1e06832b41900760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f1ecd6d2e0000040300473045022046214bc35e9e6211ea5eebc95e2e7bc5d71feca20abf51d10c634492a7f201d4022100cc5fa25e761dfac657c6e24e34b3c0ed6d06ee082e1c8d68e583ba554ee9e2ee . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009fc16a0e841ff2c98a4fba0b2b1dee779d175da6f5986753ab490a492b8be4db87dc0fe51ddb4a805b83eb7c2f28e5deb6375bc7cf35620b90a98916c3acee622041050558997c8a9594577d1c208e54613c1f631ce496c3ce4a8e4a933c539cd70d40933d7b3e3a1e0d70b01b9123a009422bacbfac206e24216efe6842e472ab1772e5910cc581b803f76d2d33d78ebe4e3b286e24f2cc5f166a735ecd143502f0446c5d64a9fa915f0b2d7ce22ab67e40558527029de4dc0e1732967b66ee2708b706a66ed40df4ffd020303a5f549b05205e0954e79da861cfe730fc9c830a770b6bb97d036d245486443c540fa6ac7a263210e4a7837ee1f004bf67db24