collection.vc
Issued by R3
About this certificate
This digital certificate with serial number 03:3b:df:47:67:bb:27:80:34:bd:27:ef:e3:38:31:a9:c1:69 was issued on by Let's Encrypt.
With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=collection.vc
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:3b:df:47:67:bb:27:80:34:bd:27:ef:e3:38:31:a9:c1:69Serial Number (int): 281710306043669181969859772420198492651881
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 48:e5:95:9c:d7:4b:e6:f1:0b:96:0f:69:c8:0b:06:9b:13:c6:a3:ab
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 15:64:51:66:fc:82:0d:45:80:af:0c:dc:ff:6f:f3:9f:9f:5b:24:66
Fingerprint (sha256): cf:04:54:ed:89:89:78:29:41:16:31:7b:8e:6d:47:43:b1:8e:73:34:7c:04:4f:7e:05:9f:20:c7:d1:6d:7e:8a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate collection.vc
19
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for collection.vc
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
2afortoday.com
beforetheydestroyus.com
collection.vc
dayonerealestate.com
endthisdisaster.com
enerpactoolgroup.es
gopvideographer.co
hempworldwide.com
insidehunting.org
joshuapierre.com
kidmozart.com
lakeandpeninsula.com
moundvalley.com
nosugaralcohol.com
potstocktrades.com
sanantonioseniorsguide.com
svgcompiler.com
theoap.com
thomasarts.co
beforetheydestroyus.com
collection.vc
dayonerealestate.com
endthisdisaster.com
enerpactoolgroup.es
gopvideographer.co
hempworldwide.com
insidehunting.org
joshuapierre.com
kidmozart.com
lakeandpeninsula.com
moundvalley.com
nosugaralcohol.com
potstocktrades.com
sanantonioseniorsguide.com
svgcompiler.com
theoap.com
thomasarts.co
Other certificates including the domain name collection.vc
(limited to 100 certificates)
Certificate
The complete raw certificate details for collection.vc in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISAzvfR2e7J4A0vSfv4zgxqcFpMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjYyMzEzMzVaFw0yNDA3MjUyMzEzMzRaMBgxFjAUBgNVBAMT DWNvbGxlY3Rpb24udmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE zxhBuhFK1ErtUxEksykACkDZo1vg4ZsENAcPJZBFAjKtQEeipHYfl8wLVyvK08D9 HOKW1m9cEeMuY9C9g+3JbTE7D09FK8gWmswvTvsLeWuYn0Mnnnj27PzgPaW0cBjl qPXSSrGSvOVTEpGGe4nGOA/iZIChIsa9TagAbPDmiLDy2BRjOHGmUa3nou/3l3Mh KNzaMTStR+kpQp0vGL17vdg6RNPnmQ+NU5YwtcvLDiohqsmiqLmpOmtIbyqrT2Pt OyVefsdeDQiJxO2wk2CPC0pYxp7SphvKUdsjno4BRtfPviP6MTqrNow4PZedL4Pr UIrKyI6BFnyZafrtGbGtAgMBAAGjggNxMIIDbTAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFEjllZzXS+bxC5YPacgLBpsTxqOrMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv MIIBdwYDVR0RBIIBbjCCAWqCDjJhZm9ydG9kYXkuY29tghdiZWZvcmV0aGV5ZGVz dHJveXVzLmNvbYINY29sbGVjdGlvbi52Y4IUZGF5b25lcmVhbGVzdGF0ZS5jb22C E2VuZHRoaXNkaXNhc3Rlci5jb22CE2VuZXJwYWN0b29sZ3JvdXAuZXOCEmdvcHZp ZGVvZ3JhcGhlci5jb4IRaGVtcHdvcmxkd2lkZS5jb22CEWluc2lkZWh1bnRpbmcu b3JnghBqb3NodWFwaWVycmUuY29tgg1raWRtb3phcnQuY29tghRsYWtlYW5kcGVu aW5zdWxhLmNvbYIPbW91bmR2YWxsZXkuY29tghJub3N1Z2FyYWxjb2hvbC5jb22C EnBvdHN0b2NrdHJhZGVzLmNvbYIac2FuYW50b25pb3NlbmlvcnNndWlkZS5jb22C D3N2Z2NvbXBpbGVyLmNvbYIKdGhlb2FwLmNvbYINdGhvbWFzYXJ0cy5jbzATBgNV HSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AHb/iD8K tvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjxzmcXsAAAQDAEgwRgIhAIlw ZNNlR43Op3Jzrs4NSHmZu8IEyTCUjc05phAUXj4HAiEA+4W4Nn00HIVxi3etjxaO ooK2c9wFwbx1auaoduyz/FYAdgDf4VbrqgWvtZwPhnGNqMAyTq5W2W6n9aVqAdHB O75SXAAAAY8c5nLJAAAEAwBHMEUCIE9+LwqBNSAM3smDTXU0SznOQewjDTwpVIQw 4v3U3VrLAiEAlewxU7Uf5Ob2HDYi6vv5e4q6Dm2bSNQBh9xs4sr7Kw8wDQYJKoZI hvcNAQELBQADggEBAGk7uoY7hNfXlzf2WE4B8nPbXbHGH2k10Y5DilyZrZQdAx8C oBhDSYti5i8nUIPYjjmlRFJ2DPpgbWgudTqj7ymeG3brdvmnQZzWFomVN8NS6T9B 55l0+iQYIn9O1dpjXlGcsa6iDc4PFB/NZRUmOfyCCimjFmFkbD+U1wAatsxm/0j3 2D+M/G2UNZyVcYjNy0NccI+vEAOML87l8HW2Gl6XPzWaZVjZUmp9DlWh66fFzvd1 ahdbOZ0FDQSv23eblXx7ov20cDTLlRdkewCz3+/5f7lUBrS3vlWoPPYYTdT/Pv0+ +/4pj7HomUY8U3t9cnB00hUUouit9stwBiJbSaQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM8YQboRStRK7VMRJLMp AApA2aNb4OGbBDQHDyWQRQIyrUBHoqR2H5fMC1crytPA/RziltZvXBHjLmPQvYPt yW0xOw9PRSvIFprML077C3lrmJ9DJ5549uz84D2ltHAY5aj10kqxkrzlUxKRhnuJ xjgP4mSAoSLGvU2oAGzw5oiw8tgUYzhxplGt56Lv95dzISjc2jE0rUfpKUKdLxi9 e73YOkTT55kPjVOWMLXLyw4qIarJoqi5qTprSG8qq09j7TslXn7HXg0IicTtsJNg jwtKWMae0qYbylHbI56OAUbXz74j+jE6qzaMOD2XnS+D61CKysiOgRZ8mWn67Rmx rQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 281710306043669181969859772420198492651881 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 23:13:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 23:13:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'collection.vc' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24844830002155879556521565644956821956406592357943179953742748199663946471791697241740277505922135546299324922552298439370828150832443382964806680442610428509321948775375191273765603734900954675306503763952173801159594168554592317442989772313678301681333428331651965307192608804901697546082848622995361501496403226984602598402097431410034955704233160942099630771754193460472203750240687680706589921483367057938326877071671507415453302362267891337846758876420430398843213021112769098030762736374295117745958168773876743463328214967356064637111599289110954163612614706789565540047815253940464019807376437056833389703597 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 48e5959cd74be6f10b960f69c80b069b13c6a3ab . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2afortoday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beforetheydestroyus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collection.vc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayonerealestate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endthisdisaster.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactoolgroup.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gopvideographer.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempworldwide.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidehunting.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joshuapierre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidmozart.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakeandpeninsula.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moundvalley.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nosugaralcohol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potstocktrades.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantonioseniorsguide.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svgcompiler.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomasarts.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f1ce6717b0000040300483046022100897064d365478dcea77273aece0d487999bbc204c930948dcd39a610145e3e07022100fb85b8367d341c85718b77ad8f168ea282b673dc05c1bc756ae6a876ecb3fc56007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f1ce672c9000004030047304502204f7e2f0a8135200cdec9834d75344b39ce41ec230d3c29548430e2fdd4dd5acb02210095ec3153b51fe4e6f61c3622eafbf97b8aba0e6d9b48d40187dc6ce2cafb2b0f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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