mycard.moe

Issued by R3

About this certificate

This digital certificate with serial number 03:35:b0:f8:80:ba:6e:05:49:20:fd:b7:28:6a:99:38:35:33 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mycard.moe

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:35:b0:f8:80:ba:6e:05:49:20:fd:b7:28:6a:99:38:35:33
Serial Number (int): 279607057669888457570431256581027069965619
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4f:7b:dd:e6:c6:cb:48:f4:fa:27:d9:a9:0c:e8:a2:15:cd:b0:cc:1b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3e:17:ec:c2:cc:f9:fa:13:16:6e:64:55:e5:27:44:d5:60:a0:bb:5e
Fingerprint (sha256): c7:b8:97:cb:7f:01:1b:d2:32:41:e8:b4:34:35:bd:28:9e:c3:b4:63:89:0f:59:75:48:06:fb:16:f8:be:6a:5d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mycard.moe

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mycard.moe

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hanatan.net
*.koishi.pro
*.minio.moecube.com
*.minio.mycard.moe
*.moecube.com
*.moenext.com
*.moestart.com
*.my-card.in
*.mycard.moe
*.newwise.com
*.oss.mycard.moe
*.pages.mycard.moe
*.play.mycard.moe
*.risayuzuki.com
*.touhou.cc
*.ygobbs.com
*.ygopro.cn
hanatan.net
koishi.pro
moecube.com
moenext.com
moestart.com
my-card.in
mycard.moe
newwise.com
risayuzuki.com
sentry.myacg.cc
touhou.cc
ygobbs.com
ygopro.cn

Other certificates including the domain name mycard.moe

(limited to 100 certificates)
mycard.moe
mycard.moe
mycard.moe
mycard.moe
wudizhanche.mycard.moe
moecube.com
tiramisu.mycard.moe
mycard.moe
mycard.moe
mycard.moe
satori.mycard.moe
satori.mycard.moe
mycard.moe
mycard.moe
mycard.moe
tiramisu.mycard.moe
satori.mycard.moe
wudizhanche.mycard.moe
moecube.com
mycard.moe
test1.mycard.moe
mycard.moe
satori.mycard.moe
mycard.moe
mycard.moe
mycard.moe
mycard.moe
wudizhanche.mycard.moe
satori.mycard.moe
mycard.moe
mycard.moe
moecube.com
thief.mycard.moe
mycard.moe
mycard.moe
satori.mycard.moe
mycard.moe
thief.mycard.moe
mycard.moe
moecube.com
satori.mycard.moe
mycard.moe
mycard.moe
mycard.moe
mercury-us-1.mycard.moe
wudizhanche.mycard.moe
mycard.moe
mycard.moe
mycard.moe
mycard.moe
mycard.moe
sni.cloudflaressl.com
mycard.moe
mycard.moe
mycard.moe
mycard.moe
ygobbs.com
mycard.moe
mycard.moe
chat.mycard.moe
mycard.moe
*.mycard.moe
mycard.moe
mycard.moe
mycard.moe
satori.mycard.moe
test1.mycard.moe
mycard.moe
mycard.moe
mycard.moe
mycard.moe
mycard.moe
mycard.moe
satori.mycard.moe
mycard.moe
*.hanatan.net
mycard.moe
mycard.moe
mycard.moe

Certificate

The complete raw certificate details for mycard.moe in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni6YGyhOCOyPjrSHI1DQ
mFsW1XMdhXLMZ0A1ZHez6Yjkl1Ct6i03ya9KTLAUjm/v9FnfBd0zxBRMeSrRVhHY
coMdemyPiQ/BkJtM846zv/DjnWVp/J2IeLa8Umj1BCej16ZDaRJ8c/vSQ5cfMGdi
09DiWzPDrAbY5F81j9eS5z1b+k5AqRNBc6MmNx64qP8EiK+biTr22Fjo25sORNni
cXcHaZOHkJ5slSzT+ayNsJSgxSLwbBxT9EHNwNCYjG8aPBERYovy1LxMi1t91p3d
lJkJN8oBnUx0qfRi+fk2d9JNjbSyb0Tlw575cYgFeSP4zT5aRmHivw+jcqItpU51
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279607057669888457570431256581027069965619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-14 03:33:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 03:33:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mycard.moe'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19968628623441404858136951336513517167688464575939579492843304435670765966883243787513486235390936411577193039414737974689250712011081510581072435138483040519199032935772904862196879019149992862309761620884485050621318811195834213818169360381912247523144029188484711601333287118724204354891859773585604551479293739340109485769131710017905830489439026717492104865636545173029820172394416183268658016421711527245185604643344546497108032127210317752647296891062350379123150208302607994169604330145489156109243898704414904121693167501186229242780054291413456183457553104628609826140026107930811104510500733244317182621039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f7bdde6c6cb48f4fa27d9a90ce8a215cdb0cc1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (447 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanatan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koishi.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minio.moecube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minio.mycard.moe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moecube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moenext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moestart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-card.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycard.moe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newwise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oss.mycard.moe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pages.mycard.moe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.play.mycard.moe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.risayuzuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.touhou.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ygobbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ygopro.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanatan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koishi.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moecube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moenext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moestart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-card.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycard.moe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newwise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risayuzuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentry.myacg.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touhou.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ygobbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ygopro.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018952ad008a000004030047304502204bcd7ffb944ad79d8edd019f8df71ec4b9c0a29062c4874cd6ffe344b4c6831b022100cffd3da6d8b55bbad7e56fbdc3b5e1779f4eff2917b6c91750922bb7a1ed92df007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018952ad009a000004030046304402205c9b1cac9a3f5479bbf1ee7df6d2f73b026ad87833ce75341c38b7f140fd3291022059d6562c3b8cb26808d5f30ca8e34e10b3edc86f3055b39fa672d44410a3f14b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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