dynamicfenestration.com

Issued by R10

About this certificate

This digital certificate with serial number 03:d6:ec:fd:4d:d3:15:25:3a:41:d2:cf:c4:e4:6b:ee:8e:da was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dynamicfenestration.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:d6:ec:fd:4d:d3:15:25:3a:41:d2:cf:c4:e4:6b:ee:8e:da
Serial Number (int): 334472297352941246540690637991476674334426
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:d2:3b:a6:04:40:aa:b7:d4:7d:6b:1d:46:68:40:8a:5c:af:b9:74
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 97:fc:1f:4d:3b:a2:82:58:b5:34:25:2d:d1:4d:57:5f:2c:9f:a1:b8
Fingerprint (sha256): bc:04:90:cf:15:13:d7:29:cf:68:34:dc:9d:70:57:92:9e:2a:8b:52:e2:20:20:d4:86:67:9c:b9:4f:02:4f:3e

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate dynamicfenestration.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dynamicfenestration.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dynamicfenestration.com
dynamicwindows.com
www.dynamicfenestration.com
www.dynamicwindows.com

Other certificates including the domain name dynamicfenestration.com

(limited to 100 certificates)
dynamicfenestration.com
dynamicfenestration.com
dynamicfenestration.com
dynamicfenestration.com
dynamicfenestration.com
dynamicfenestration.com

Certificate

The complete raw certificate details for dynamicfenestration.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334472297352941246540690637991476674334426
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-28 06:50:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-26 06:50:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dynamicfenestration.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 935266846281647356729513322279936424794520966681018740862617937774633915313509722103501500299091776471471154887907380102974408383908040473707075865054184819970804792821032217202891461446813050996677150394574135989808747998564692488097694794213821230967134408014773457802275531037157262845456145869881564609681921113378986554879332497511347003649911649626467637627209721906640180456448164553894549305386707693226105490386973778322279801819617471263949247083904675885994334142639576537370679556790024848517161942880655705322624735652477440572227505861766418486293950391049874310547138501920617256210625993211013675984734880442195059173283770299860149334654057324082122227431911866736818818459156896970210850097884055764009279470956094250639376750366350303646028225327722842955209072947475901160991505587048868989675170138901431175401338672009033032452779018181844827895148963825871596406028202729614475091980582505560351673315938458652698228742129432459182349197395967347728659899809932911927513278254017081672861212237592731963340554265920219794416860348929043274821982829687707198909558223732015343639236558258606013753816448591071335451582986019401249125332072909244373511468833369256669436639212951732686414701291055754407649167457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ad23ba60440aab7d47d6b1d4668408a5cafb974
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamicfenestration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamicwindows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dynamicfenestration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dynamicwindows.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e000001905dd2eab9000004030047304502210098c8f263650143059c3c2576f0a603094690421932ad6eece940d3ef83aa9a5c02207562b82dfda53496ab9b32650c550f9566a33419b0ef7e43108abafb5e699dfe00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001905dd2eafc0000040300473045022100d8458d42d5808c1bff0114fb730723a430198b8683e05e4e84a31b5734eb58bb02204ac49de559f31a7f38cdde9e9b684d5344ab8830bb1e35ca2c3438e30f97097d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004bea3649b2b992e62924d5efea715ab5f2bd16fbf31b22ca9728609df6f4c3e7f37fc832cf0f37eff4ff98ccc5acab275e8f1ae253bd618a907da5e07b1acc709e5e14836fdda98914b5381bb1cb789ca682def3c0ac5234de611ee56185ee5aa06e501ba72f2db43d5093962e63a479ec7590cf1636f09dfc124797ca7b38f28200ddc3751fe1509f0e6c1ca7ef4553a1427b1ae801ce58fe448e459989f26c26ff025658f67a87364098fab240ba7fdc5536dca5f0e7ec66bb7f5504a915bdc54a86b6ee6c7d9ecaf3ebb1112e337263257cad258fa514128c92b217b5d5e7b541d063a48f8dd67a63e0a120d074dee1cca39ff5f01bd4bb4e538860f635e4