clipnip.com

Issued by R3

About this certificate

This digital certificate with serial number 04:39:bf:fe:3e:e6:87:58:f4:77:f7:07:c8:82:04:54:1a:47 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=clipnip.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:39:bf:fe:3e:e6:87:58:f4:77:f7:07:c8:82:04:54:1a:47
Serial Number (int): 368100441307905226602802980912690330081863
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 74:9f:51:32:80:95:d7:a8:4a:b7:f2:7a:17:da:33:f2:00:4d:3a:ce
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 15:37:f0:3e:26:b1:9f:c3:be:52:85:5f:94:0a:31:71:f4:3c:f3:e9
Fingerprint (sha256): ba:d2:5e:ae:e8:de:71:c7:78:c4:16:a7:7b:8e:d6:c9:20:83:31:97:24:95:77:01:c3:33:a8:70:2c:59:20:11

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate clipnip.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clipnip.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clipnip.com

Other certificates including the domain name clipnip.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for clipnip.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyNEBX+8Dyd9nQykVsmVY
cVay4QWZrEQPnL0k0XBGHu8Nuna5VVlUovb45fC9NriIwva6v20vLkL7+uMDcK93
aDN37pspIFJ3zz3jzIfllxruUivCXwFwoum/WoU+MXSPi4OoZCfk6n1g29uCgfTY
kkII+aiDSNwSAowQywSrV4fdR5TiwJBvv0dIw7mvLTz7cw8MUc3LLR/PdtPR2q0S
olxu+birkcDCkJbQLjyHyu/9yS/m21hSEAScncMrAjiZoYZucyg5CB0vt79QO+7f
B2+EzWM/drGZO8f+0HUNHdmyqJEuYtuu2B26nY0EFAXIpUDt6KunZ+W6Jpv67IU6
R8a63DxIum48sq4L5GDmLPQBntL3WZ5J7OadqXT95CRzKNvvzv4iq9FiHH4q36A6
+7z5JkOirGB9T3IXvXjwZERQ1G8UyfqtUtoc+ImvrISrH7CFRG/5zfXgukZBW5Zn
iph9WKvuLvXXikFg4w2EPKXJKqLgo0m/TDx5BBFyI8EuEk+P1190xxrBNR1XC20q
vyIWxFX4wFEh7YQlUVMH17d5OZ6mjh7a8VdKNS9sDH8XQjcy63NstAqrGKIGLhP8
7NepajpAuA6yvAWCRMA/BOFXWwwdCInkscM1JWU+VJ2BC6ltWK4bYqgTXFLQaTqC
7oVIAOKyy2kL30JNLXajhmMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368100441307905226602802980912690330081863
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 02:42:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 02:42:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clipnip.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 819259546097137675668114106708443741497492723746040503623362967209591477134999570646095518211387509830735144513660073620840167027722312538722534397953838143337920228066784173574269278742573718026188809104809772085475225092177972503722173786180210279962565224019830555951084702275470501130039790085688202846270279344183397125612785506238414854964640514275535895964393656532293495704077570632662344540741841540080911945211434183149621899519047985663769932329788040910588855041941229373456250015854313528294101084727467033261309568411652793712058422459772138332124013973491783822464213028309704647840134367484738946783432186820448549979554975041821902699132384590767261510170428538576933343688791753012721682349127075001069453236840075040689219921102758063620834215283514654496318931879407947503812402695487738997702732155132572304323142231749707401944173614008327360987471360587805248659288506475797199602328929478727784145534313140992007980109306602197819151425681433816556831043929176411107001732401324604389820095475389332360594076402451641691714717453242138027906189906589327187032399244005274138309525361688068547369381172187107033340650344440987839271221944383463036079947651200010733150317466304679520430666742875234369890649699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							749f51328095d7a84ab7f27a17da33f2004d3ace
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clipnip.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d911c163d0000040300483046022100c1f933b364f246976ecf4cdd5ff09defc5e95c75f2aadd55e3b74f8107e63a96022100fd0eff3b5a4f9f5027153348ba1a96ab4d52c1ba3d39a6e6e648cd5716e7a1f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d911c168d00000403004830460221008b5cec64637553f69899738ef217bb6255bda1c8c85d43cd402c6af0fa3e20c3022100dcf3b723f1467cfd327425ebcd04fa95019b63cea5fb3c5d59b2ab8887ec9269
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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