cddc.capital

Issued by R3

About this certificate

This digital certificate with serial number 03:9b:93:fe:53:b8:e5:86:b8:0f:81:89:4a:a9:8f:0a:0d:9c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cddc.capital

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:9b:93:fe:53:b8:e5:86:b8:0f:81:89:4a:a9:8f:0a:0d:9c
Serial Number (int): 314277341724897666194452936812247395208604
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:69:12:0c:94:19:c3:0b:a8:24:94:7a:64:ea:71:2a:cb:62:9b:cd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b3:0f:81:e8:7d:9b:7f:c3:48:3a:57:b9:83:7e:81:8c:ef:2d:41:5f
Fingerprint (sha256): be:c7:f8:68:f4:97:25:20:4a:9f:8d:f1:c8:53:29:fd:8b:de:a0:25:42:31:a5:50:86:80:b1:18:31:6d:9c:cf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cddc.capital

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cddc.capital

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cddc.capital
www.cddc.capital

Other certificates including the domain name cddc.capital

(limited to 100 certificates)

Certificate

The complete raw certificate details for cddc.capital in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314277341724897666194452936812247395208604
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 11:59:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 11:59:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cddc.capital'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782884357908182802355375564875005682179396976074523658947369919654566371214100391486374710022024308458831523721680081749498802111407834632506872222183934163093662613892985913937289068150109617781035307533831354810719849664470502365906462081750739554328028648354740643238779739110790635047121807848594937820655297236366843878028237063573339189544346726421233840208294686625706529477372692388072670311614278045498770479692431841430080498167420374150799248279405159523570332265877931849930407640042160965193956332357445321181922318557232458253203605535364968945144063166351784996602400670939239453474938452949997725147762147737246770593219757492597087915917931324367782868664344151658702482909543419645890858302119168500739214378388445435361399234977574152373456442905810212649487061240413082626379818972852159163276511690448135599092961010917672505282208053564723157483135409080457109609445212010378201477673108573006297421088737984349434721693022368896027350049611765215479650057186163661191020633933619806814345097304993181061935235298309536298370132094069757645656445105618967083398357371913776117527433984336289082450947002612211781231732394455001566037724187426589113357682463006877194953412393659808795671553809170562532758495233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c569120c9419c30ba824947a64ea712acb629bcd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cddc.capital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cddc.capital'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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