unitedsweetsofamerica.com
Issued by R3
About this certificate
This digital certificate with serial number 03:b8:e4:d4:6c:2d:e9:7d:40:39:0f:48:70:7d:22:e8:40:9d was issued on by Let's Encrypt.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=unitedsweetsofamerica.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:b8:e4:d4:6c:2d:e9:7d:40:39:0f:48:70:7d:22:e8:40:9dSerial Number (int): 324252980252844153353434089527331768516765
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: cc:4f:d4:c5:b3:f7:d3:77:9e:cd:18:a1:16:b1:51:f7:91:d3:92:a5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ad:fe:36:9c:15:e5:38:f6:98:ba:d8:82:d4:6f:07:ff:48:1f:7d:54
Fingerprint (sha256): d2:2d:8b:31:5c:7a:5d:97:1a:6b:9d:be:c3:d3:5b:5c:94:69:8f:32:92:66:64:e7:4c:83:8a:9f:dc:f5:7c:16
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate unitedsweetsofamerica.com
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for unitedsweetsofamerica.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
coppermoney.com
duplexguy.com
genevaartgallery.com
howtocontrolenglishivy.com
infinitearbitrage.com
koreaforvip.com
pearbitrage.com
rusticelement.com
silvanuspublishing.com
unitedsweetsofamerica.com
duplexguy.com
genevaartgallery.com
howtocontrolenglishivy.com
infinitearbitrage.com
koreaforvip.com
pearbitrage.com
rusticelement.com
silvanuspublishing.com
unitedsweetsofamerica.com
Other certificates including the domain name unitedsweetsofamerica.com
(limited to 100 certificates)
letchat.world
34755625397.ca
letchat.world
bramptonhomebuyers.ca
bramptonhomebuyers.ca
lease.club
fldc.bible
bramptonhomebuyers.ca
prozac.co.za
bramptonhomebuyers.ca
unitedsweetsofamerica.com
strandhotel.co.za
flanaganinstitute.org
unitedsweetsofamerica.com
unitedsweetsofamerica.com
crappie.org
enerpac.asia
www.exortwex.world
www.exortwex.world
texasmarksmanshipassociation.org
bramptonhomebuyers.ca
advertise.world
q8.co.za
htp.hacker.rehab
unitedsweetsofamerica.com
independentmuseumguide.org
satellogic.org
bramptonhomebuyers.ca
pregnancymiracle.me
unitedsweetsofamerica.com
photo-studio.co.za
34755625397.ca
letchat.world
bramptonhomebuyers.ca
bramptonhomebuyers.ca
lease.club
fldc.bible
bramptonhomebuyers.ca
prozac.co.za
bramptonhomebuyers.ca
unitedsweetsofamerica.com
strandhotel.co.za
flanaganinstitute.org
unitedsweetsofamerica.com
unitedsweetsofamerica.com
crappie.org
enerpac.asia
www.exortwex.world
www.exortwex.world
texasmarksmanshipassociation.org
bramptonhomebuyers.ca
advertise.world
q8.co.za
htp.hacker.rehab
unitedsweetsofamerica.com
independentmuseumguide.org
satellogic.org
bramptonhomebuyers.ca
pregnancymiracle.me
unitedsweetsofamerica.com
photo-studio.co.za
Certificate
The complete raw certificate details for unitedsweetsofamerica.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISA7jk1Gwt6X1AOQ9IcH0i6ECdMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDQwMzUzNTFaFw0yNDA3MDMwMzUzNTBaMCQxIjAgBgNVBAMT GXVuaXRlZHN3ZWV0c29mYW1lcmljYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ+Vg4sQ31vgOU/46WdmqmrERCBNu4mOxP56ZOgkz04YE981yY uh8Bh86yIKq+IEYGvxDrrqaI1aA9v3oDAruEvTOebVQYMCoKvIb/bLuOxWjIhr76 0bzzyiJR8bfVLWLNJU3EsJ+A7gcjZejjCty133GZFp4z/eHnyndOQ2Vb1yehrdW6 4gPHVgWTg0izrpKqgSSQBigV1H5QV+0/TveDGLWY0jeDJswVd6LC9/Pv3Rmvqm4Q sJr6vFpygTHPpd04lPmbhWernLpZ7nLhjTakJYndsNHITcOKsmJuhOHl01hC0NLe M9JapQl6rl7Uy5vs2FzAt2mzFIitWblhWmTvAgMBAAGjggLUMIIC0DAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFMxP1MWz99N3ns0YoRaxUfeR05KlMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMIHcBgNVHREEgdQwgdGCD2NvcHBlcm1vbmV5LmNvbYINZHVw bGV4Z3V5LmNvbYIUZ2VuZXZhYXJ0Z2FsbGVyeS5jb22CGmhvd3RvY29udHJvbGVu Z2xpc2hpdnkuY29tghVpbmZpbml0ZWFyYml0cmFnZS5jb22CD2tvcmVhZm9ydmlw LmNvbYIPcGVhcmJpdHJhZ2UuY29tghFydXN0aWNlbGVtZW50LmNvbYIWc2lsdmFu dXNwdWJsaXNoaW5nLmNvbYIZdW5pdGVkc3dlZXRzb2ZhbWVyaWNhLmNvbTATBgNV HSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3AO7N0GTV 2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjqd0xUEAAAQDAEgwRgIhAOD0 Oto4jVLun7UE8DarqoQRWJOPh/nWVDH0Iq8UjQgyAiEAgpG5JQ+kiJTYXFOg9n4G bpTYCLW1zpz7TbEG+CoDyeEAdQDf4VbrqgWvtZwPhnGNqMAyTq5W2W6n9aVqAdHB O75SXAAAAY6ndMXzAAAEAwBGMEQCIFDnqFKn7M/cyslCwK+f2dT4MeEsM7WcgJqq CIXmTvoTAiB01WCspVN8wCZB2ELeos96g+MLnupvq1fx2//C5sJAADANBgkqhkiG 9w0BAQsFAAOCAQEArRP1Sa7e7lc9fP2iONtlt/cPjAR3xVh9+S0VCT2oCGnXA8FJ xZJt5+3B7toDvtbu5uB1qnt9+FIjEzGRE/YYyzepPB6MOmb/m92gifC+3FE1Umtu +EdKDEarCPq8cQRLlCqxXjyZiaQNgMOhoDeRgx58lRf3nSl27XHh6vycOFWrmpH+ g7COKWu3j6+zqBbAsE92/A43JXJqC1lrGmWTTEZvXPuWNJfNedP8hYNmUcEbLL+D nb+zLuvtK6gt9LiPd+jnV8jP5D2tHxxK5kKX4Xak2GO0NAIZeRVUzSNIgdXyKsX1 b0WNJNV/vGQGu0ezFvc1sk9vf5wmLatZ4g5/Hg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PlYOLEN9b4DlP+OlnZq pqxEQgTbuJjsT+emToJM9OGBPfNcmLofAYfOsiCqviBGBr8Q666miNWgPb96AwK7 hL0znm1UGDAqCryG/2y7jsVoyIa++tG888oiUfG31S1izSVNxLCfgO4HI2Xo4wrc td9xmRaeM/3h58p3TkNlW9cnoa3VuuIDx1YFk4NIs66SqoEkkAYoFdR+UFftP073 gxi1mNI3gybMFXeiwvfz790Zr6puELCa+rxacoExz6XdOJT5m4Vnq5y6We5y4Y02 pCWJ3bDRyE3DirJiboTh5dNYQtDS3jPSWqUJeq5e1Mub7NhcwLdpsxSIrVm5YVpk 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 324252980252844153353434089527331768516765 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 03:53:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 03:53:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'unitedsweetsofamerica.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26380523845267354600180617644207637464595919266048511448598132361007720522674191236648919862553015132785697178109586462265440000218135567246214644047392504836668947750076420436285107516520390034784076166930997156201169827542340338747021936820582038173754727289225059897702340034731667105531900859486504025369117199723828618586864728848024365084492108920264540157429059938675009072516751273244362287093547258690453816477889201617031129946030400585575128491533555570279231425686549139283572897002812725252302951826335919020393314979701376435246585123846690160703680138004783070086560445272315668498213492582362239362287 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cc4fd4c5b3f7d3779ecd18a116b151f791d392a5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (212 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppermoney.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duplexguy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genevaartgallery.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtocontrolenglishivy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infinitearbitrage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koreaforvip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearbitrage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rusticelement.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvanuspublishing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedsweetsofamerica.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ea774c5410000040300483046022100e0f43ada388d52ee9fb504f036abaa841158938f87f9d65431f422af148d08320221008291b9250fa48894d85c53a0f67e066e94d808b5b5ce9cfb4db106f82a03c9e1007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ea774c5f30000040300463044022050e7a852a7eccfdccac942c0af9fd9d4f831e12c33b59c809aaa0885e64efa13022074d560aca5537cc02641d842dea2cf7a83e30b9eea6fab57f1dbffc2e6c24000 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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