loyaljamaica.com
Issued by R3
About this certificate
This digital certificate with serial number 04:92:57:9e:86:a5:04:64:a3:f6:b8:fb:ff:54:9d:6a:22:ea was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=loyaljamaica.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:92:57:9e:86:a5:04:64:a3:f6:b8:fb:ff:54:9d:6a:22:eaSerial Number (int): 398246835246951831746951894361037743989482
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ba:c8:68:1b:ab:28:3d:41:ae:e1:d3:48:69:53:67:06:85:ff:68:1f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 43:c5:b9:b6:8b:f2:cd:41:78:ea:4d:1b:d2:66:4d:a4:a2:62:33:12
Fingerprint (sha256): bf:1c:6a:4a:8e:8d:5c:00:df:dd:00:d6:0c:39:f6:ab:42:8d:ae:1a:50:2d:3f:cb:cd:d4:a5:0f:1b:36:02:4b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate loyaljamaica.com
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for loyaljamaica.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
100rings.com
aplacetorecycle.net
elkhartwaste.com
ensign.in
homeschoolwebthree.com
homesweethome.net
ipr.management
lagunarealestate.com
laportedumpster.com
loyaljamaica.com
prosper.realbrilliance.net
samueldunn.com
shemalecolorado.com
texnetsys.net
weightlosswithsuperfoods.com
wildthinghemp.com
xcroseissugarreimagined.com
zinnia.investments
aplacetorecycle.net
elkhartwaste.com
ensign.in
homeschoolwebthree.com
homesweethome.net
ipr.management
lagunarealestate.com
laportedumpster.com
loyaljamaica.com
prosper.realbrilliance.net
samueldunn.com
shemalecolorado.com
texnetsys.net
weightlosswithsuperfoods.com
wildthinghemp.com
xcroseissugarreimagined.com
zinnia.investments
Other certificates including the domain name loyaljamaica.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for loyaljamaica.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgISBJJXnoalBGSj9rj7/1SdaiLqMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MjEwOTI5NDRaFw0yNDA4MTkwOTI5NDNaMBsxGTAXBgNVBAMT EGxveWFsamFtYWljYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVbEYoPoaAwNaWWpmeDTs7McrbU6igEkvnifGeU/Igby7BaPQJeZE5nLoxR+r9 uo0+4WgvQgw16KodZPLdRD5ktXoVhg77gs2ibVMNZrHeGRn7UawmeoDLJw6qcJyi 0jmDZTVlCTW8/lUU3gm/1zmL1k1u25lM56GCuYC8MerSS8vYJRnVdygKM3tDKVoe IMI/zwQE8q0HWawHQla6+U63YK9SCCKb0QaqGZEbG5Xou+B6383rbYhrqWNyb4cx Xi3SYFhWXQDlJfRAXLVFwoMCSMDdS/KOrFULsNkQVSZutB8gNqdsBwtpF1OFg0nv MgNiRYYudW3CYyUBxAVUzMfxAgMBAAGjggNxMIIDbTAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFLrIaBurKD1BruHTSGlTZwaF/2gfMB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMIIBdwYDVR0RBIIBbjCCAWqCDDEwMHJpbmdzLmNvbYITYXBsYWNldG9yZWN5 Y2xlLm5ldIIQZWxraGFydHdhc3RlLmNvbYIJZW5zaWduLmlughZob21lc2Nob29s d2VidGhyZWUuY29tghFob21lc3dlZXRob21lLm5ldIIOaXByLm1hbmFnZW1lbnSC FGxhZ3VuYXJlYWxlc3RhdGUuY29tghNsYXBvcnRlZHVtcHN0ZXIuY29tghBsb3lh bGphbWFpY2EuY29tghpwcm9zcGVyLnJlYWxicmlsbGlhbmNlLm5ldIIOc2FtdWVs ZHVubi5jb22CE3NoZW1hbGVjb2xvcmFkby5jb22CDXRleG5ldHN5cy5uZXSCHHdl aWdodGxvc3N3aXRoc3VwZXJmb29kcy5jb22CEXdpbGR0aGluZ2hlbXAuY29tght4 Y3Jvc2Vpc3N1Z2FycmVpbWFnaW5lZC5jb22CEnppbm5pYS5pbnZlc3RtZW50czAT BgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AD8X S0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABj5qzLTIAAAQDAEcwRQIh AMLPVgM9ygMvgZJvnXA04YjEKSegJkwV3homVhGXkBOpAiAZjM+629URZuCUnYEY vaYtiOyNOsilsyLhP0zmoDIs4QB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FI WUZxH7WbAAABj5qzLS4AAAQDAEgwRgIhAPllOhX4psSYTYJokKad3hlzfdpzooMA nYPI2KXzDNzCAiEA/ieoDMLs5wc97tcRQV1tm0Mjmh9MHEOmYo2lzoLCFqAwDQYJ KoZIhvcNAQELBQADggEBAKIRjs7xQophkntkwHuXj85EcN+9WFfjogB+nw7sOE1l BrYG5nprRt1d9m9rw9Llw60A44aGfrJ3gPEeQEaNcHpeBx8Gub8UCSQdKlYesNUr rbQfg+JwJgl7f8PirzuJ7u+5ikDjXkuSHJifB6zuevL1LRRHxUcE7IoMV8FzEoHu YBxXgJum5YDMhHWDOdJofELFhtALqvdYoBCWiPz2hb0/v9YhKIi2BBkCAZuYkkZ7 8i3Gkc8wZ6sRuvkLK9J+bjF137jfW79F4PvesgYt1D6RoVB2bmx95I8hVGlEiEMT 68XKSfoPGDHZpNeY6jz9Kv2qlM+rQn8NLpIRNeqi6nU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WxGKD6GgMDWllqZng07 OzHK21OooBJL54nxnlPyIG8uwWj0CXmROZy6MUfq/bqNPuFoL0IMNeiqHWTy3UQ+ ZLV6FYYO+4LNom1TDWax3hkZ+1GsJnqAyycOqnCcotI5g2U1ZQk1vP5VFN4Jv9c5 i9ZNbtuZTOehgrmAvDHq0kvL2CUZ1XcoCjN7QylaHiDCP88EBPKtB1msB0JWuvlO t2CvUggim9EGqhmRGxuV6Lvget/N622Ia6ljcm+HMV4t0mBYVl0A5SX0QFy1RcKD AkjA3UvyjqxVC7DZEFUmbrQfIDanbAcLaRdThYNJ7zIDYkWGLnVtwmMlAcQFVMzH 8QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 398246835246951831746951894361037743989482 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 09:29:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-19 09:29:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loyaljamaica.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26942150882548067166073990925256657153690841149299094822951963659499068436905384847976757742331082801832278730375765802677857848386747784902959010684566388216931981430884510798459961519327698740633188098959719802098781556285949552286846537117883602314131946068073562108341878057750009710945907044014053940290284204820750548962198348350144317157950800744065041032846115196102836631407581383175724313625251803429465395857015567128388655721820587436612475690194275300827426834580725128097441968876251204733812730675084429938556152584197834809880237796336238296904755541254859913449126409761493848448037632690490773915633 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bac8681bab283d41aee1d3486953670685ff681f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100rings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aplacetorecycle.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elkhartwaste.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensign.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolwebthree.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesweethome.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipr.management' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagunarealestate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laportedumpster.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyaljamaica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prosper.realbrilliance.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samueldunn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shemalecolorado.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texnetsys.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weightlosswithsuperfoods.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildthinghemp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xcroseissugarreimagined.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.investments' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f9ab32d320000040300473045022100c2cf56033dca032f81926f9d7034e188c42927a0264c15de1a265611979013a90220198ccfbadbd51166e0949d8118bda62d88ec8d3ac8a5b322e13f4ce6a0322ce1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f9ab32d2e0000040300483046022100f9653a15f8a6c4984d826890a69dde19737dda73a283009d83c8d8a5f30cdcc2022100fe27a80cc2ece7073deed711415d6d9b43239a1f4c1c43a6628da5ce82c216a0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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