glasses.cool

Issued by R3

About this certificate

This digital certificate with serial number 04:2f:da:2a:88:9a:16:8f:63:ef:39:3c:94:e5:46:5e:4a:75 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=glasses.cool

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2f:da:2a:88:9a:16:8f:63:ef:39:3c:94:e5:46:5e:4a:75
Serial Number (int): 364732407522490089634686970881909240777333
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 04:b0:48:43:de:68:f2:e3:4f:7c:ec:ae:e1:ea:5b:e5:30:34:4b:1a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 45:03:93:29:d6:11:11:14:66:51:26:bd:1f:66:2e:2a:6a:c9:90:b7
Fingerprint (sha256): cb:fb:7b:7f:02:ef:a5:7b:7c:e8:12:2b:7b:b5:07:9d:11:7b:0e:69:99:6b:7d:71:06:79:c9:58:92:f0:6c:1a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate glasses.cool

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for glasses.cool

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

claystowergardenbiz.com
domainreits.com
erlebnisbauernhof.com
finediningnj.com.texasgulfcoastbooks.com
fortwork.shop.e-rail.com
galacticleyline.net
glasses.cool
hkn.co.in.usahalfmarathons.com
holidaylightingquote.com
jewseurope.com
numediagroup.net.calendaron.com
rallscounty.com
sanantoniolocal.com

Other certificates including the domain name glasses.cool

(limited to 100 certificates)
leaselock.ca
cng.world
leaselock.ca
sculpit.cafe
mbschoen.org
justwanna.world
starband.ca
biospace.one
justwanna.world
carupanoarriba.work
mbs.bible
real.finance
engineering.cool
cng.world
lotteries.cool.rezeptfreibestellung.de
229.cool
allanblock.ae
chicago.world
allanblock.ae
allanblock.ae
glasses.cool
lease.club
apify.de
glasses.cool
mbs.bible
thynk.capital
cng.world
real.finance
dominiospremium.ca
real.finance
leaselock.ca

Certificate

The complete raw certificate details for glasses.cool in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YH7e0WkmmPU5K1tYKf4
gbQTB+XxD9WyX+xtMdPqv4dfpUsI81KiLJ0lzqa3UneUg7P7qrOEXadHdSaX2V5T
DCYWWWQTlszRM4BgkD0+sPvTUITaO5VSyOC2Y3MCQOofCAFyGBmdu2uIs3OZbjI8
iydgpcdE6t/Mutc2iwyVTJddqw2RC91Z/fMhcGhFYxi3OGoinrenOz/YBH6aU5+z
EbZdcdDG3FYnYcjLMBffzERK6wit8vIDwgFeoFFABCcCJyn50NTaxxnCcqE4ai4i
gIdOI5Kfmy+PPJ3z6gTYeFjBN1OCUntXHEZzOVRVVwquJw7RQgy4rVV6xnA6Ybnh
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364732407522490089634686970881909240777333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 23:06:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 23:06:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'glasses.cool'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27457808863203805818432100043354559671224779890202828261159712770256568159672374600134376394318141193221846830379903971522702008240799509279226846476786543817486477289100728575730066429767157371704265080412806259385926243141120101114518282166369499725682172297930515869512265655518290759481542190080309256423534872304802878895814764257072172805291186351125510237915079687787063116845436106574544622597513968755479080391537480121404245284368014641191335330864985954889002463479802357526305549217885476469172438341544301574854958953623738295155535028629166530308263563772025366051942117748349378643797119869440853926239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04b04843de68f2e34f7cecaee1ea5be530344b1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (317 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claystowergardenbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainreits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erlebnisbauernhof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finediningnj.com.texasgulfcoastbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortwork.shop.e-rail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galacticleyline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glasses.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkn.co.in.usahalfmarathons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidaylightingquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewseurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numediagroup.net.calendaron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rallscounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniolocal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c0e1912340000040300463044022067cb826d52109feb46291da7d1d780350c1b742f0dc9f9d388eea5394e6040fa0220028291f406d9263577a72d4edf4137235a797e1ae9c5a751a6fa0d617a6244e6007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c0e19122f00000403004730450221009da1e718b9f30ad019f0d9473654a5eb83f9dd9760e516c17dd56be5c613fd330220672ac58a0282fceab1f062063a9bae567d41a12162541f06d2dc0e28367cea8b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008431c15559a70f222b6956bdc3e613daa770111aaf0844466223134b71439c9143172b84442518c7036ec0cf8e90238feeebd2086fa4c04bd607775c2821971eecde3140220a028b8fb4ba755ba504cc6f1bb40bfd1f040ad5125280e77999f65371fd6718aa829798aab6caec13cfc48f533624d20bddb4949994cdac24b333aa96a515e457ffffc00a12ff965c518da0d7902baf246696e82c0524b66fe7227238ecc12efdfa4ed07ee4955573ac5b85e1f574782add076f4b7a98005d4ba921062e1ff2fa0f8b42c59200af54df74a0ae7a958a1fc244bcae6f94a853cd9db5d8655dafb1c74307b78ce273816e6c2d127528a6cc5990f1825647e812f841