49ers.love

Issued by R3

About this certificate

This digital certificate with serial number 04:08:b9:84:9f:ef:de:11:9c:a2:f3:f8:93:2a:d6:93:75:7d was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=49ers.love

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:08:b9:84:9f:ef:de:11:9c:a2:f3:f8:93:2a:d6:93:75:7d
Serial Number (int): 351417998468721415113075935178238184355197
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 37:99:db:9a:7e:97:48:25:aa:d5:c2:0f:32:ee:cc:4b:a7:25:19:4c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2a:67:a4:f8:2a:d5:ce:8d:c7:99:a9:2f:ac:60:36:47:c5:f5:81:38
Fingerprint (sha256): d7:1e:93:5a:73:6b:2f:a4:9b:09:bf:53:14:4b:aa:23:2b:2c:f2:0e:d4:9e:f8:b2:c9:1c:d1:9e:94:c6:f9:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 49ers.love

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 49ers.love

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

49ers.love
cum8k.com
enterdollar.com
fl.cosfacts.org
golfforvip.com
jazz4vip.com
kappiah.com
legacy-planning-advisor.com
oprnsea.com
oregoncourt.com
perfectserial.com
re.vg
ri.cosfacts.org
schildkraut.com
seatoskylive.com

Other certificates including the domain name 49ers.love

(limited to 100 certificates)
qdd.co.za
trailerskirts.ca
proskategear.com.49ers.love
49ers.love
49ers.love
siliconvalley.blue
oilseedcrushing.com.imnaha.com.mn.cosfacts.org.49ers.love
ssl-zq51a.epik.to
49ers.love
49ers.love
49ers.love

Certificate

The complete raw certificate details for 49ers.love in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp2uuUDq7Z8Bd1U/3GVL
ZZl1GP2egVuJt/CQOriXT/e1aSYTR//xiWgD1YmooiOwzB2eZUupZSGj0++O81u0
SxUfD1JN2n/jKFL/i5fu6NTd18WjTVnenoZuhmlaxuoDYNz4K7R46DcHXzUEQtsi
vR4r9he2IxT3DI4NJjaSeOYb6aZQxUw/0O25TmpFd66prO8Yz1YQcPx6pir/aqXy
PX1lLxTfuaChD6IM4MyY+bjnUQHjVStHalUqy76ALalaKXy2TzrysmS+OEQKJVbD
jK7aDCdNCdMe97DohHHXRHw3jgXu97vAncrPHiOr2KMBkXUDiBWJaDJen+4UQauk
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351417998468721415113075935178238184355197
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 00:07:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 00:07:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '49ers.love'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26082846968793709754564499971232454548549704646693827035072743737157236087838056309340084297959505540383944224804949980436924749414081442617209974233928806853873321000578153488384632029758098186474487070096511445567801531143914746787765192445155047542549423184853216113398632881739331480213934098853048960466030815420462730726000589014054697469175826196576355148634760002760378271744691988722032717290073173925897713395544338505378976778599227969721142882430182696656217997445835722646279871069111802760926022316738381423717274927470524448305184401053472470265193488445786825445368680093608381150324155666979768476877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3799db9a7e974825aad5c20f32eecc4ba725194c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '49ers.love'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cum8k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterdollar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fl.cosfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazz4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kappiah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy-planning-advisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oprnsea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oregoncourt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectserial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 're.vg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ri.cosfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schildkraut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seatoskylive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018db9c14e7d0000040300483046022100b8619a35e4c79ed0b7694aca8c004d23549d0266b60dae5309ac67975fea7c49022100bcceb50656dff959fac7e21fb398dcdef6d08db81fb54497eaed660579c6ffed007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018db9c14e860000040300463044022020956c91694ecb1bf9e5dd09fdf26172766f073b94d2854ace0ab0225f745e910220712fe2b4fc0400fd386c1cfff911077cb9b0ebd60d575d792b16c846c8c2e603
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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