mm.am

Issued by R3

About this certificate

This digital certificate with serial number 04:3d:ee:09:f1:ac:90:65:4e:93:6e:7b:b5:4e:ac:ac:13:db was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mm.am

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:3d:ee:09:f1:ac:90:65:4e:93:6e:7b:b5:4e:ac:ac:13:db
Serial Number (int): 369522776004619416395453523121885774877659
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 15:82:81:89:28:ba:4c:bf:c7:09:44:21:cc:b6:d1:d8:d4:5c:2e:c9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f1:c4:e6:60:e0:87:e0:8e:08:f5:95:32:7e:b6:25:3e:5a:1d:72:98
Fingerprint (sha256): d8:03:f6:ee:10:13:59:ca:dc:4c:69:a3:18:4e:05:f8:d4:13:ba:4b:b3:25:a4:bb:4b:c0:19:7a:43:09:4d:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mm.am

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mm.am

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mm.am
www.mm.am

Other certificates including the domain name mm.am

(limited to 100 certificates)
sheep.mm.am
www.url.mm.am
sni.cloudflaressl.com
vpn.mm.am
skyromanwwereigns.mm.am
mm.am
bedroom.mm.am
goat.mm.am
reality.mm.am
sni.cloudflaressl.com
babysitter.mm.am
mm.am
know.mm.am
sni.cloudflaressl.com
health01sites.mm.am
sni.cloudflaressl.com
resume.mm.am
zero.mm.am
mm.am
serv.mm.am
music.mm.am
seeing.mm.am
mmnews.mm.am
sheep.mm.am
smiling.mm.am
bedroom.mm.am
sni.cloudflaressl.com
mahdifb80900.mm.am
powerful.mm.am
mmnews.mm.am
smiling.mm.am
mail.mm.am
ncrcu.mm.am
naruto.mm.am
mail.mm.am
fish.mm.am
mm.am
mm.am
resume.mm.am
www.url.mm.am
vpn.mm.am
goat.mm.am
filecv.mm.am
health01sites.mm.am
mm.am
cows.mm.am
chicken.mm.am
mm.am
mm.am
mm.am
health01sites.mm.am
chair.mm.am
mm.am
filecv.mm.am
fish.mm.am
sni.cloudflaressl.com
pwd.mm.am
mahdifb80900.mm.am
sni.cloudflaressl.com
sni.cloudflaressl.com
vpn.mm.am
mm.am
chicken.mm.am
chair.mm.am
headbangers-ball.mm.am
mm.am
headbangers-ball.mm.am
mytests.mm.am
mmnews.mm.am
skyromanwwereigns.mm.am
mm.am
mmnews.mm.am
health01sites.mm.am
health01sites.mm.am
vpn.mm.am
sni.cloudflaressl.com
resume.mm.am
mahdifb80900.mm.am
chatgpt.mm.am
mm.am
mm.am
naruto.mm.am
mmnews.mm.am
mm.am
sni.cloudflaressl.com
powerful.mm.am
mm.am
headbangers-ball.mm.am
babysitter.mm.am
mm.am
sni.cloudflaressl.com
mm.am
the.mm.am
sni.cloudflaressl.com
cows.mm.am
seeing.mm.am
mm.am

Certificate

The complete raw certificate details for mm.am in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 369522776004619416395453523121885774877659
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 14:29:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 14:29:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mm.am'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 725329704106689775540203074284693924483725056621313268718180283538556796127555421138428432698651121480808239749881383589117318971943655234671324113314757394569838588788594705699251319707879992222147492228719076397346019658615770703835950957000676902803928603240177748181090249215306283827413011193843517958245321024383210377424424043438772649605985804730499327268572251747106539446317915237965142430212953954868997056526010610594656729500805719018114101498570205752470552876135694297665384177375003860696635924039439508580326752234349223945658352328161904756149204229020074739260328570018072226267639210452106629827277987858057340673554262210571536318563205541436336761907919927823039892768471270201951800413381192857620815164182441332325254477220561000716783988584112232805383402362556644355462725725012431898054868254633614055372827369057877757198440977995347014970127920068315130824708592303240827703344763502865030663528127568133271447244629604565926489466827811865308570733571658431462364726999940926635167646890052880322438222678709950670948358840719296769134098945875207249460115208018802651731806007731408310251382494352618996481482326487023790540885055636697671838760800284550777362392273409644471597223871530396694183819033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1582818928ba4cbfc7094421ccb6d1d8d45c2ec9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mm.am'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f2f9fa75c0000040300483046022100c22dc44573518caa2153886d246ce82ee0fef45206eb8395efea4cc8c0097320022100ab60b472b88637c5f803d0503f2dd769e39324accc507542954548f49c76a247007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f2f9fa766000004030047304502203f704c0af2f7aa513e915dabc0563d38a904c7bbb5f2257833654995d0bc633a022100b21d291937a7af746194bd12527cb49c77eb5547f2d43dcc84599de1c896170c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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