minifreezer.org
Issued by R3
About this certificate
This digital certificate with serial number 03:07:a5:b4:f9:26:ef:48:23:93:ce:ef:cb:e5:39:d1:bb:08 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=minifreezer.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:07:a5:b4:f9:26:ef:48:23:93:ce:ef:cb:e5:39:d1:bb:08Serial Number (int): 263939096649871072184941288170401433762568
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 62:02:fd:b2:ea:bd:26:86:96:70:a5:8b:33:20:42:c1:6d:fd:fa:a5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c2:57:1c:3b:46:81:23:6c:12:72:84:2e:2c:e8:bd:46:ff:b5:4e:f5
Fingerprint (sha256): cc:8f:1b:ce:e0:1e:c7:12:d6:48:19:6f:d7:68:f5:d4:da:df:f7:b0:07:ff:68:b9:e4:b1:ee:6b:15:fb:58:b4
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate minifreezer.org
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for minifreezer.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blueskydrive.com
minifreezer.org
phuketcrossfit.com
tenxmeta.com
toplessbanner.com
minifreezer.org
phuketcrossfit.com
tenxmeta.com
toplessbanner.com
Other certificates including the domain name minifreezer.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for minifreezer.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAweltPkm70gjk87vy+U50bsIMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMjUyMzI3MzdaFw0yNDA0MjQyMzI3MzZaMBoxGDAWBgNVBAMT D21pbmlmcmVlemVyLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOS1+2w5PaMLVa/Z8Ltr/MrbJWJcQ7LRgvWVB3vl5O47CjQfiaPEvDNbr47NuT9z 6n0zhBtAJRUdJEL4FMWML9L+a8ORwFeynJjCfm8YS+3SHW6j0aqQuKYf6MDa23+O TwazjuhlmtBWKvlqGZwESCBR8sg7jbJrw9VE65fvpmIfiz0xjHH1Rd4VF7DrC38P 0Vf3j9D3ZZVn4fMXVm+tcPoimPo7lG/8go7aBMQVTFu32/frra54gnQItqN3zIHi aFhXlUPh8S0Us1RztWNKX/u73cYqhTxiWuiDm17E7L91zcIFz6j28lpA6EI6Y0Co HOjf1dvew/DGAgs8PmTO4pUCAwEAAaOCAlgwggJUMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUYgL9suq9JoaWcKWLMyBCwW39+qUwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wYQYDVR0RBFowWIIQYmx1ZXNreWRyaXZlLmNvbYIPbWluaWZyZWV6ZXIub3Jn ghJwaHVrZXRjcm9zc2ZpdC5jb22CDHRlbnhtZXRhLmNvbYIRdG9wbGVzc2Jhbm5l ci5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdwCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAY1DKjnLAAAE AwBIMEYCIQDwpHRYjliu6I7Uif/tb9/Yz/7Byxxd0fYMiNxS5RLNdQIhAKdvDvC3 oU6bGc3FCRay+3mf/RQiaKgM8ladTCsAi8VUAHUAdv+IPwq2+5VRwmHM9Ye6NLSk zbsp3GhCCp/mZ0xaOnQAAAGNQyo6YAAABAMARjBEAiB4zFTpXNlLnzep2zpBjjQs ep47IF5m4PfJEACeFXSAVgIgW06QEjO8aMYLvPS4IkjaezjtqL1nqy9dQGU1d4qc lZMwDQYJKoZIhvcNAQELBQADggEBACQ78sBR87hEwf8XmlkTGGcF/7g1b3Z6SVOR ocP+wFidFiwOqQpAeaMrEL7ebnuhy+HhOAl+rQDpiQU/xMtdYSxa8frswFs/AQoM C78MBrj1A3y1KzOvi9NqDpy2ghYNLFtjjWMYhtLPkBaCvrZe42qRMwtKYOmoVxP9 Y7puO7exI4xrLiVrnlTg3WhYiV0uhRzd02jNXjfV3DjuOwSwjc218DxP3A1uTjRI o4Dw79hbBb9iQm3DVFlvm0QWMuTtk/F7GbStv9o8gq2pJzlWyMd+siiaSmwTs4VJ 9PxOH0QzqaMln9EbYPFWRwvWKZcvNASy49BKD3tk1BGc7qORfZc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LX7bDk9owtVr9nwu2v8 ytslYlxDstGC9ZUHe+Xk7jsKNB+Jo8S8M1uvjs25P3PqfTOEG0AlFR0kQvgUxYwv 0v5rw5HAV7KcmMJ+bxhL7dIdbqPRqpC4ph/owNrbf45PBrOO6GWa0FYq+WoZnARI IFHyyDuNsmvD1UTrl++mYh+LPTGMcfVF3hUXsOsLfw/RV/eP0PdllWfh8xdWb61w +iKY+juUb/yCjtoExBVMW7fb9+utrniCdAi2o3fMgeJoWFeVQ+HxLRSzVHO1Y0pf +7vdxiqFPGJa6IObXsTsv3XNwgXPqPbyWkDoQjpjQKgc6N/V297D8MYCCzw+ZM7i lQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 263939096649871072184941288170401433762568 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 23:27:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 23:27:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'minifreezer.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28872072260296313838401584715337638594826990845292448293818097194467545726877931163447095771776749823248038774286237695583136202439121129956132946537262632711678530025324153248321487205622158524119717060049204237049106572276453292594326532489544633523246565922015383533791097214146513352794971393421997488054493467583510631623568270610443406116818601452532015221485565686290563542170653860686820433751350166416309355173254368351382573502998292309533811021970258277024136330932627538509198478705256033508079458074148111060947808286504818909458745528153530156148440445251843523680582344293876488973638711649160284529301 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6202fdb2eabd26869670a58b332042c16dfdfaa5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueskydrive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minifreezer.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phuketcrossfit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenxmeta.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toplessbanner.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d432a39cb0000040300483046022100f0a474588e58aee88ed489ffed6fdfd8cffec1cb1c5dd1f60c88dc52e512cd75022100a76f0ef0b7a14e9b19cdc50916b2fb799ffd142268a80cf2569d4c2b008bc55400750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d432a3a600000040300463044022078cc54e95cd94b9f37a9db3a418e342c7a9e3b205e66e0f7c910009e1574805602205b4e901233bc68c60bbcf4b82248da7b38eda8bd67ab2f5d406535778a9c9593 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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