healthypot.com

Issued by R3

About this certificate

This digital certificate with serial number 04:21:1a:3a:4e:4e:aa:ad:e4:8f:78:5e:64:4c:fb:d2:6d:43 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=healthypot.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:21:1a:3a:4e:4e:aa:ad:e4:8f:78:5e:64:4c:fb:d2:6d:43
Serial Number (int): 359713324504800727149610363177479590538563
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a3:9a:59:af:6e:f0:d6:da:31:f0:99:ff:d0:8c:d8:08:a7:4d:69:a4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5c:e6:f5:83:78:76:5c:d7:b5:1a:d0:af:29:20:8e:47:3b:3c:de:1f
Fingerprint (sha256): ca:6f:bc:8b:95:40:bc:1e:e8:b6:7d:9e:27:57:43:2f:fa:2f:cc:7a:99:0f:79:d8:c6:28:19:5e:0c:c7:9d:ae

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate healthypot.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for healthypot.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

healthypot.com

Other certificates including the domain name healthypot.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for healthypot.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF6jCCBNKgAwIBAgISBCEaOk5Oqq3kj3heZEz70m1DMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MjUwMTUyMTZaFw0yMzEyMjQwMTUyMTVaMBkxFzAVBgNVBAMT
DmhlYWx0aHlwb3QuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
qUl0Kled/rEEQX+bdcIDQJC+8Bk8BsI0W+8LWWjKdomzOI+Hk9Ln431y0mvqb+jD
ueeuYbisaQ8aDK7hNIM2T3RIF28cyzjmKJ5/7NEdIEWfeLkzfrxHUVDBd02iRLsX
zG0cKRTlefYLXY2xk1wCtPX5jGuWpbOQis86Kpm7kkVmN7t3/scBiMSQS/nuks7l
XbESbTWT4aCzKYjRtdvV+fHwKVO8mcpwtaFE4tRfZlFW68dPRdd0z5INIuMEKHGm
R1Cpsqk6R0yH7rsBjBz2gkvCJwOTOSr/dD1QpUm/3hr29hm9HphvhT6Ot9xUbS/h
ebRDsddOJJdLCOpF5ka7K64xJpE9Rdgbzp60Z1vkE7dK6eaWxC2GT+4YEjfy1zV2
l9LF/4NnGYx6m+xAaj/g2pMdlTI+cnrQNc39xqrJjHgcFzvd7RlkOj1QEkLFkWQd
kY6ITbCzFE1GRMdscdB+gFuKHNrmOEWfpV7QIBmz5QQ8bwT56W9eX4kXjLpZf/hr
6G30n5dx3vmhvQZfTtodGtfKe2oZj4wC9VapDSYuN85xaDklDMcu5AhbSnFl6z0Y
D92491oiSc5fjYapLOR+1KBEX9Hcf5f/q/wxfT8ta1Ud0sGatYL/rvMa36ROfeir
orTlYw6P0gs9fQH+hGW6VXQ8zmtNk0Nt6DHofix4wfkCAwEAAaOCAhEwggINMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUo5pZr27w1tox8Jn/0IzYCKdNaaQwHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wGQYDVR0RBBIwEIIOaGVhbHRoeXBvdC5jb20wEwYD
VR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwB6MoxU
2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYrKQHQUAAAEAwBIMEYCIQDd
5PmWbD1rw+4cqlD7J3qUrSMPql93stHPs2AA3JDKKgIhANg9SnXQPuD/uES2ws4E
O4dXh5eJvZ7v733nLUbL8WVcAHYA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3
fW0GvW4AAAGKykB0BAAABAMARzBFAiEAjJHVb6GeTfcC7/cKI9QtuhuKpiTMVxT8
eIiZesQRFzMCIFAh6WRs3lmM2BhQUjmAsFYTcqULhhZrSi6BMofAV5ixMA0GCSqG
SIb3DQEBCwUAA4IBAQC6UtP3DHeacT7DwC2ua1CvWB82AJibuejUvse8qd8/CBuJ
TpiUZTLBLuYZj2XDqGT4UpDywWfqZXiUKPdjK5AYTFynYE+wYqE8KvqsAfqrrAIE
XM/13h2BwmZg+Wc5hCxIcthcYW1mI4v+rUrpPkGOX/QG+9Z7jrQ+LEB9sStfSugj
5f2hK8Jw10Lb2ULie8G42Yft5PgHAa5SxssyU0IOHQk4F/3ol6iYXg7S0LtKfYOk
DWAEKmVzZ6fzX6JOWwUsjZG/xLhNsz26Dtf6beWIJu+f5oAOTcBI7RUdzEA0u9JS
oar1o6p2Z8gYXoOTpdI65Wb7PQeSs8MLPyxscbKW
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359713324504800727149610363177479590538563
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 01:52:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 01:52:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'healthypot.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 690630414845039239971455944053176420502664396687339559577790086653256777512895042044206969352166729080550796243717405426132768508392367121089087197015159316506724616786417776477985810817324831578092102614226665093493940164026862441511440109332930442612165210593285941215371761264677489904228759252764531532741506735672126019963741302947737086619776479835610021975629176328476593513110550580529801629732136989868644442725787666403234516128901547771644826968369627617815933358049422660659479127777059749651127937790445266736631321299778748204687414920954407639391180325830150440506606076175458902592452157294342880351565846379354983134705840071127456259975846407490104253979999888100814619905102123848867272235489031448036709516906742188999032888441001744794664735868611026185390914694352241042222726697166504628127640481200986365636895474964855725551393174047618930168958561285177825709460134757291537629219080819379255168588996232968194544526205169705808589445886420263136295571196696715306739046941162188901761552518494128034070277344877538596311175096902851694137982293588100082480778646953479869114103399844780980315281441721866266589870268661940347070413859027684547607783611211291014633553029619803521005096646277514627047277049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a39a59af6ef0d6da31f099ffd08cd808a74d69a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthypot.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aca4074140000040300483046022100dde4f9966c3d6bc3ee1caa50fb277a94ad230faa5f77b2d1cfb36000dc90ca2a022100d83d4a75d03ee0ffb844b6c2ce043b8757879789bd9eefef7de72d46cbf1655c007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aca40740400000403004730450221008c91d56fa19e4df702eff70a23d42dba1b8aa624cc5714fc7888997ac411173302205021e9646cde598cd81850523980b0561372a50b86166b4a2e813287c05798b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ba52d3f70c779a713ec3c02dae6b50af581f3600989bb9e8d4bec7bca9df3f081b894e98946532c12ee6198f65c3a864f85290f2c167ea65789428f7632b90184c5ca7604fb062a13c2afaac01faabac02045ccff5de1d81c26660f96739842c4872d85c616d66238bfead4ae93e418e5ff406fbd67b8eb43e2c407db12b5f4ae823e5fda12bc270d742dbd942e27bc1b8d987ede4f80701ae52c6cb3253420e1d093817fde897a8985e0ed2d0bb4a7d83a40d60042a657367a7f35fa24e5b052c8d91bfc4b84db33dba0ed7fa6de58826ef9fe6800e4dc048ed151dcc4034bbd252a1aaf5a3aa7667c8185e8393a5d23ae566fb3d0792b3c30b3f2c6c71b296