parkcandy.com

Issued by R3

About this certificate

This digital certificate with serial number 04:61:b6:29:d9:d2:e9:88:48:dc:f9:a8:c6:aa:f9:67:a2:67 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=parkcandy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:61:b6:29:d9:d2:e9:88:48:dc:f9:a8:c6:aa:f9:67:a2:67
Serial Number (int): 381698670115769145044938691758090797687399
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bc:1c:78:c1:ed:cb:a0:90:07:1b:e9:9d:0f:ce:e3:66:3a:a5:9d:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dc:d9:76:bc:19:61:c7:7f:7d:89:60:24:b9:f4:b0:de:a9:79:e3:9a
Fingerprint (sha256): cd:af:aa:47:84:3f:ab:66:1b:66:91:6c:bb:89:e7:6f:c7:24:fd:33:8b:d7:4e:11:d8:7f:92:95:88:41:3a:7f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate parkcandy.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for parkcandy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

parkcandy.com

Other certificates including the domain name parkcandy.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for parkcandy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1EsIpFJJNXH0GgbII48
fWcJPO+mNKpv9ag/+zC0xEErMQtuEgOY3Cqq/H5yE+E4790f4S6eBFMom5V4VYDT
tssIQgy0GAvM8fg9RWBsyECj9Ijq11HbELuYt/g6uSWEhFXYPt560SjfHj+8787C
OqxqQ8YsS+Utkox9w2bVrVzJ79bhJlfabNVjWOldUjlnaZ3++JDEbjvTPJA3gsoW
57Ap8wfSaFg7KYdA5Eb+knqGGCqfXM8RoK1xlTYjjD7XGZst8HBTStRo4tyQNdvr
BIcA1VhhzzjV/MSWpNPxt8w+iTq/Fd4szA5Y0K1TVVWnVTn+1KKkiG2jIDaRB9qU
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381698670115769145044938691758090797687399
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 23:43:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-02 23:43:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'parkcandy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23646590632154477123798097348051682324084745544727025636835381736635601774143171138283752269618098623261702066718698626761087850984289673430488158541884264235960857795869157920915859672026307552091357981090700688013516181406834372006844331782744042406128186447940731708139850884570504371171151099079846308025401874729088295705843016581983246455880060148494063425222757083874110529468730610106235698974291103176759922602504812556678507338300216635040118549471573861813753751188203646036349380618567440098645937019788953877835971683109709632657686407760798461865543481058597900875775436589835646112626986205262607193213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc1c78c1edcba090071be99d0fcee3663aa59de4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkcandy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fe5d978980000040300463044022030131ee962a64f0339e7ead09b4fdfccaf152ad294749d91addee234b3070f5b022009afbf01756bbf2ad49745c12a8f4fd237e49314b075a6e7f43cce72eac28b690075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018fe5d978e000000403004630440220372016bc919b60d7944074ef2a2180eb1998f428db3f0ade35be088f83c557a402200ba0117d5673a98708fc93d62da6567cb292d7632391e3fa1a5b8f5540e565c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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