consumermag.com

Issued by R3

About this certificate

This digital certificate with serial number 04:33:04:a7:ff:99:fc:7d:0e:16:4e:1e:12:e4:c5:4b:3f:2b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=consumermag.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:33:04:a7:ff:99:fc:7d:0e:16:4e:1e:12:e4:c5:4b:3f:2b
Serial Number (int): 365809733649781862403418703441760388595499
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6c:fd:8f:b6:16:dd:5b:e5:4d:d8:4c:26:bb:9b:18:d7:9b:ee:db:82
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8b:03:ab:78:83:79:77:fa:ab:48:03:65:a3:81:c0:4f:a5:b9:9d:4a
Fingerprint (sha256): c3:0e:ce:76:0c:3d:91:7a:71:6c:1a:99:28:71:a8:d3:e9:21:c8:d2:da:85:a9:fb:b1:c6:f9:97:70:be:e6:ef

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate consumermag.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for consumermag.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

consumermag.com
www.consumermag.com

Other certificates including the domain name consumermag.com

(limited to 100 certificates)
www.jointpainwestvirginia.com
abselling.com
slimtable.com
www.industrial5g.de
www.consumermag.com
neonmakeup.com
www.imagesofwildlife.com
consumermag.com
www.blockslice.com
visitnagasaki.com

Certificate

The complete raw certificate details for consumermag.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365809733649781862403418703441760388595499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 01:06:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-22 01:06:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'consumermag.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800488638628145072995165247461922576475142046811140067538162070454700198401660194282115034266622129121212022361489819097575788770313795791891182993411440251285657929100591123491067710832657841236192484600629232423207879435034185154008765775771959279739335707104496669459864125644679542355308064570881688941219051475704332571138227210370245816820280744521834779509206937819844058632948702091277147488827126584011403086287126260186864293724140416305639763506253366222355978951185174764077136859516699521701646632695284256447179072643338025619831022203925877019949958424855514424494702985414306905420195064811122202609703425519395175028396727877659651467810749351747950101585321269020165378676845581252482588245435154033026674020123407020772033027723274153647116951642536811258753273631621484110034336762638578554868992372625447755541403948976980942233028037885238868562219212017179795428412154193881601666892125355599080243474399591400816619828726579056099016433551447384939940624224521178042584942899838107741749934588040478161480768954907135615105480612151215035532886254435640751329098106645302611261074052225184747028868663819632660941135478059791517578259097456418731883484113598761109135137945717840924975986635667089531580550753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6cfd8fb616dd5be54dd84c26bb9b18d79beedb82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumermag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consumermag.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e6e35a97600000403004730450220647c3516f48edfb36e8ee407abde8f92219e9df2ec10d7cedbde9b4aa84984bf022100eabb8520848a4c89903be8bb0d4758a4d3c39f545269a6526ebebbf67fcd6477007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e6e35b15a0000040300463044022038d381c968c89fe59c746d707acbfd1c0a9aefa126eaec1bc46bf1940c113daa02200f1dc5a885d7991263160ab1b283914283a27cd3caa7aa91e71c362278eec26c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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