pre-reac.com
Issued by R3
About this certificate
This digital certificate with serial number 04:02:3c:f4:5d:23:32:62:4d:4d:d0:da:57:57:ce:44:e8:a0 was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=pre-reac.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:02:3c:f4:5d:23:32:62:4d:4d:d0:da:57:57:ce:44:e8:a0Serial Number (int): 349210730950116112881621595731456866707616
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: f4:87:b4:86:4d:69:aa:f5:0f:5b:47:14:40:40:cf:57:e7:88:4d:16
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): f6:d7:78:91:a4:df:5c:81:8f:f5:c1:5b:01:5a:a7:e3:f8:c6:4b:9a
Fingerprint (sha256): bc:79:e5:01:34:64:a5:c8:a2:18:d8:37:15:18:f1:81:be:64:c8:a3:40:6c:6e:dc:a4:67:76:7e:dd:01:ec:ff
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate pre-reac.com
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pre-reac.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
backimonostor.com
bbsblog.com
brandpositionking.com
freeonlinemarketingebooks.com
landscapeandpools.com
pensacolapressurewasher.com
pre-reac.com
rfidexpert.com
sitevssite.com
texasmilitaryschools.com
therecoverymasters.com
thesocialremodel.com
bbsblog.com
brandpositionking.com
freeonlinemarketingebooks.com
landscapeandpools.com
pensacolapressurewasher.com
pre-reac.com
rfidexpert.com
sitevssite.com
texasmilitaryschools.com
therecoverymasters.com
thesocialremodel.com
Other certificates including the domain name pre-reac.com
(limited to 100 certificates)
allanblock.ca
pre-reac.com
pre-reac.com
colossic.org
bud.world
wlq.org
moi.me
hopefunds.org
z7b.com
pre-reac.com
staycation.me
pre-reac.com
usc.mba
modaltownhomes.ca
pfe.me
ideaforum.org
potato.media
pre-reac.com
ostomy.life
fuckzu.cc
wlq.org
xza.co.za
allcreaturesgreatandsmall.org
enpi.org
theplacetorecycle.org
patriot-mall.org
onthemarks.ca
swuanyc.org
hugabee.ca
pre-reac.com
expojudaica.org
actuant.asia
mortgage.cool
potato.media
actuant.asia
congress.vc
pre-reac.com
pre-reac.com
colossic.org
bud.world
wlq.org
moi.me
hopefunds.org
z7b.com
pre-reac.com
staycation.me
pre-reac.com
usc.mba
modaltownhomes.ca
pfe.me
ideaforum.org
potato.media
pre-reac.com
ostomy.life
fuckzu.cc
wlq.org
xza.co.za
allcreaturesgreatandsmall.org
enpi.org
theplacetorecycle.org
patriot-mall.org
onthemarks.ca
swuanyc.org
hugabee.ca
pre-reac.com
expojudaica.org
actuant.asia
mortgage.cool
potato.media
actuant.asia
congress.vc
Certificate
The complete raw certificate details for pre-reac.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgISBAI89F0jMmJNTdDaV1fOROigMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDQwMjU1NTBaFw0yNDA3MDMwMjU1NDlaMBcxFTATBgNVBAMT DHByZS1yZWFjLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO87 lPWmHJNt4/zHWXX3TjT3KX39rWIieVhU0kxFQ3pOP2jd1M4zYe6Y4vBDeMlU05Q2 C9UY/2MvyZn9WjAaFwBL2VHO7iuIqduvEVjkgvEtlw86wQRis1J27EsPn6OjImh8 JMzs2mrmfrhOb/NFlDx0PxMICmzi1VqhFo2DrdEGAofUSih8itGRwoZ3n2Frqu3o i6VcPhmBflDp2JAg6850hya4ggtdDT2ZoOcxULiwKytNRl9wG1ExFGpq9bm0lHZy nS7oQwiTYVxzk38AxdzYrmeL57oC29UbjHvS4I194CErHOCZk2LpySFG853Ewn3w KPQlMNaOr1PRE5E2CHUCAwEAAaOCAwUwggMBMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQU9Ie0hk1pqvUPW0cUQEDPV+eITRYwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w ggENBgNVHREEggEEMIIBAIIRYmFja2ltb25vc3Rvci5jb22CC2Jic2Jsb2cuY29t ghVicmFuZHBvc2l0aW9ua2luZy5jb22CHWZyZWVvbmxpbmVtYXJrZXRpbmdlYm9v a3MuY29tghVsYW5kc2NhcGVhbmRwb29scy5jb22CG3BlbnNhY29sYXByZXNzdXJl d2FzaGVyLmNvbYIMcHJlLXJlYWMuY29tgg5yZmlkZXhwZXJ0LmNvbYIOc2l0ZXZz c2l0ZS5jb22CGHRleGFzbWlsaXRhcnlzY2hvb2xzLmNvbYIWdGhlcmVjb3Zlcnlt YXN0ZXJzLmNvbYIUdGhlc29jaWFscmVtb2RlbC5jb20wEwYDVR0gBAwwCjAIBgZn gQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQA7U3d1Pi25gE6LMFsG/kA7 Z9hPw/THvQANLXJv4frUFwAAAY6nP6fhAAAEAwBGMEQCIFORd8twWrON4y3isqO/ wGqrUGGC3CuXCRj3He/XQw6NAiAneSRuZE7d113v1E9QCkCoRXLO5UicYnfkSk6e BZwxHwB2ABmYEHEJ8NZSLjCA0p4/ZLuDbijM+Q9Sju7fzko/FrTKAAABjqc/qCYA AAQDAEcwRQIgWxHE85rxCKOsHbnv/nLIqQNoRRUgPHxXTvBou3QPjkECIQCFUOof /pfPIp9ucniC4ma2EdNtXCMkGQceHxYZiKP37DANBgkqhkiG9w0BAQsFAAOCAQEA SXqH6T8Mbeuqvnl3cRYd2LYAh58E58lmE/Ouyh//VMngymnW0+rEwmzhxobSmPl6 1dHApEFv/CdHvPlLs/Eou6PJ0VNa7ypUVjlHb37vpucfaftkdiMuK5DKlQqGf2Ja YwIUZ9V8U8RaJeYmUT7tLVdwxI5Tsji2mDqsSvYH0GNE7TwpHgnum9zeWqaSbhIV 2r4aKSBKqOlLNgLlFOdBAHWAr1aIObsC11F6LmYp9EYRv5upfDEfFGs5Z9FjM4uf QpJnMb6Cw033j1DGxbIP7IlYqZTfE6hday0c4ZbiWTAq7NA5pNFkvZJS02EIPGi5 xzADZ9d9frQytN++YTVJ/g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zuU9aYck23j/MdZdfdO NPcpff2tYiJ5WFTSTEVDek4/aN3UzjNh7pji8EN4yVTTlDYL1Rj/Yy/Jmf1aMBoX AEvZUc7uK4ip268RWOSC8S2XDzrBBGKzUnbsSw+fo6MiaHwkzOzaauZ+uE5v80WU PHQ/EwgKbOLVWqEWjYOt0QYCh9RKKHyK0ZHChnefYWuq7eiLpVw+GYF+UOnYkCDr znSHJriCC10NPZmg5zFQuLArK01GX3AbUTEUamr1ubSUdnKdLuhDCJNhXHOTfwDF 3NiuZ4vnugLb1RuMe9LgjX3gISsc4JmTYunJIUbzncTCffAo9CUw1o6vU9ETkTYI dQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 349210730950116112881621595731456866707616 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 02:55:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 02:55:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pre-reac.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30200335803656147174705677665569910058531480446175795887518752140679228106098130052272889049560325797984271162810381293963116289456391584787845267400463833418941002704475020123880248452382302563630867421649990161706831839286362510804778937136508045376603340948337509478631220836524121668055994330572372039943548274024680274233232898270813806828359124427304454778656383589994811194772061695147060230232214965140982252158273846455522429473281222462687025853271922695485137182165242333067592139211278405425021002793131810709669954703764925291258448519823927943155501006934829555969926591552932756171676971335466060482677 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f487b4864d69aaf50f5b47144040cf57e7884d16 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (260 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backimonostor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbsblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandpositionking.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeonlinemarketingebooks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landscapeandpools.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensacolapressurewasher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-reac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfidexpert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitevssite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasmilitaryschools.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therecoverymasters.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesocialremodel.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ea73fa7e100000403004630440220539177cb705ab38de32de2b2a3bfc06aab506182dc2b970918f71defd7430e8d02202779246e644eddd75defd44f500a40a84572cee5489c6277e44a4e9e059c311f0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ea73fa826000004030047304502205b11c4f39af108a3ac1db9effe72c8a903684515203c7c574ef068bb740f8e410221008550ea1ffe97cf229f6e727882e266b611d36d5c232419071e1f161988a3f7ec . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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