knit-boots.com

Issued by R3

About this certificate

This digital certificate with serial number 04:51:0d:85:09:cf:d5:d8:f6:21:e8:d9:b5:5a:2a:9e:01:41 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=knit-boots.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:51:0d:85:09:cf:d5:d8:f6:21:e8:d9:b5:5a:2a:9e:01:41
Serial Number (int): 376029986186072489836165696198479028552001
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ea:e9:1b:e7:6f:9c:20:e3:73:90:77:21:fe:4f:5c:69:f6:dc:c8:8b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 31:dc:bc:4b:ff:d8:95:38:b2:02:c5:41:04:eb:c8:cf:15:39:ec:d0
Fingerprint (sha256): be:1e:01:f6:74:fa:5e:21:fa:24:28:e0:ca:c1:0f:13:2e:fa:a5:a3:05:db:46:3e:1b:0f:ba:f8:a2:5e:63:37

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate knit-boots.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for knit-boots.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

knit-boots.com

Other certificates including the domain name knit-boots.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for knit-boots.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376029986186072489836165696198479028552001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 19:52:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 19:52:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'knit-boots.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810445468814413119001345955521523552968246095636954152511504347520705423579993671407385435689723736200607410354721666903604749738757426797136030406805963497512912613401972988873692914154454457729245257055487248732327462193362580911427423623722086899173401300302016413947095210864318576849883664550552271682856289100313551643247587572937145668063216704975177443892180929059140750607507905977242195740661680419795424384351771412095347196686514885333207678635979484081513686410723758191907201757688449370943382472653638516605670069048080010870336545596413609272902866483097702275690990870168255100355706121036521215073506451472340487091494596428650839322637282929965874696590505968602076555700934082800195775883930066295864558468439072464354728996333293300824357635959227703116841773804848133103795299093318744567782033992415262250649651350875724162174345352471310798525247718281658697647499130157030071746732253723359482480232475937001867090998458956341964821646251932103629871448953236678980298489494942191229974520028427027521317736548007999684054677636842878531159841095737529529959537475106779320067349362802072312263585509568435956949602992963794452633121595038078402954295522918763278553596680062415935607376196416441311952316693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eae91be76f9c20e373907721fe4f5c69f6dcc88b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knit-boots.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d193211550000040300463044022075455364c09764e9f351bd11bcc05312cd8daec74d9620a796f4c1434fbe9bec0220303f0d11e5fa2a329367eabb0fca05aa24ec7bf0a0955c86a0ced81135c516be00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d193211b90000040300473045022100bca09268e6f78174ec547498454351d8d9e339959cb36e7164f3ab60066066ed02207bedb1554e7480ce5b5cf7aa993cb6b7408d16046960ad0ea4f59d6b5af01062
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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