www.saka.store

Issued by R3

About this certificate

This digital certificate with serial number 04:2f:06:f8:d4:9f:19:07:0d:f0:1c:2c:da:2e:00:16:e6:9b was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.saka.store

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2f:06:f8:d4:9f:19:07:0d:f0:1c:2c:da:2e:00:16:e6:9b
Serial Number (int): 364451682342396579969231946540607008597659
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 26:a0:fd:90:e9:c5:ea:48:6f:d5:f5:39:12:61:8f:a7:93:e3:ee:2d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e6:04:23:fb:f4:95:58:bd:82:45:d8:a6:35:7c:7a:d7:5e:09:e9:a2
Fingerprint (sha256): c2:fc:d4:f6:2f:cd:05:10:18:f7:de:f0:a8:bf:8e:6a:ec:24:c1:c9:d5:d3:dd:4f:9c:84:4b:23:ec:d7:d7:06

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.saka.store

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.saka.store

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3sonsbarbqsauce.com
bivalentbooster.org
davesmod.com
findreptile.com
fundbetterpolice.com
gemmatec.com
juniordebateclub.com
karrierone.global
magmood.com
mysummersmoothie.com
saka.store
stemcellmuscle.com
terrifying-peace.com
www.3sonsbarbqsauce.com
www.bivalentbooster.org
www.davesmod.com
www.findreptile.com
www.fundbetterpolice.com
www.gemmatec.com
www.juniordebateclub.com
www.karrierone.global
www.magmood.com
www.mysummersmoothie.com
www.saka.store
www.stemcellmuscle.com
www.terrifying-peace.com
www.xn--9dbee7b5a.com
www.yetigame.com
xn--9dbee7b5a.com
yetigame.com

Other certificates including the domain name saka.store

(limited to 100 certificates)
saka.store
saka.store
www.saka.store
saka.store

Certificate

The complete raw certificate details for www.saka.store in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/xagFuYSzBCG9x1VOwq
ce4jBiNDPgrLErWUxDUzNhmOnowfmh9fjfDxev9bSzfdPQDUl9dgIOo1irWnN5Jh
LxsWQaVVMxrj5RE8uA0LpdP4luJ6q1gy+M37UH1hLJGNXdSINAOC91yuSXIYEx1U
cpezHqbLyo/t/Pobp0lvc4gjYxyywBGWobQXsHtwdCkAh8eOCvua9P1hP7Ll+sZj
XgoBKEa1/tr5Spaf+j/ZemZcP7aMK4LQkZA7osxtVupIvvXGAF7UK1+DH21KThVl
WwYycgFa4uRNE4GZiH7TUgARSMFMocOQrnGs6tPW1hVqHqWWAabVdWHOm4v1FXJt
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364451682342396579969231946540607008597659
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 04:26:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 04:26:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.saka.store'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20701283868662561120955969190968913628912079928676391339453337858466677764836555952871115196564057274328543690374015749239277145828402618418741738590229084952017493110056428848039547348051619971057237601482216765412481175595962424197138103156366711280124955945125422088731391538715578332776912604558714465695205543771683114912885615487650063901554341212697160188537466604776447687520333719491432563189599790607718810973540175321100691714355966321973008308428395353438069414062191133986051810252032846845312101123587090715129009032773705089518358573002532214107867583298886391659952788285816767386979371218112835907051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26a0fd90e9c5ea486fd5f53912618fa793e3ee2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3sonsbarbqsauce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bivalentbooster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davesmod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findreptile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundbetterpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemmatec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniordebateclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karrierone.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magmood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysummersmoothie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saka.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellmuscle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terrifying-peace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3sonsbarbqsauce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bivalentbooster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davesmod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findreptile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundbetterpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemmatec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juniordebateclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karrierone.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magmood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysummersmoothie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saka.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellmuscle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terrifying-peace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--9dbee7b5a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yetigame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--9dbee7b5a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yetigame.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001894db6b1800000040300473045022100a3f6a1b0f000a9e6b48756b09ba9cbac4af34210e2f29b3b2bd827eb0de018e702205bf45f40cd4c619d0f4c13750d16dda77eb516f8229803e0916f60e6f38c723d007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001894db6b1bf0000040300463044022072b2f6babd056cd6bd3817d489ccd9aaf515fc6c0f828a5a1b8a59acf7506ef502204ad2f52c7bd5819ecd7bd8259b4a85447cec14bbf6fd49d029a7d7787283cdf5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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